11237 matches found
CVE-2026-39443
Unauthenticated PHP Object Injection in EmallShop = 2.4.21 versions...
CVE-2026-39529
Unauthenticated PHP Object Injection in Elementra = 1.0.9 versions...
CVE-2026-27429
Unauthenticated PHP Object Injection in Nifty = 1.4.1 versions...
CVE-2026-12115
The Counter Box – Add Countdowns, Timers & Dynamic Counters to WordPress plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.0.13 via deserialization of untrusted input . This makes it possible for authenticated attackers, with administrator-level...
CVE-2026-12256
Deserialization of Untrusted Data vulnerability in ThemeFusion Fusion Builder fusion-builder allows Object Injection.This issue affects Fusion Builder: from n/a through 3.15.3...
CVE-2025-69122
Unauthenticated PHP Object Injection in SeaFood Company = 1.4 versions...
CVE-2025-69108
Unauthenticated PHP Object Injection in Hot Coffee = 1.7 versions...
CVE-2025-60205
Unauthenticated PHP Object Injection in ThemeREX Addons = 2.36.1.1 versions...
CVE-2025-60230
The CVE-2025-60230 entry details a PHP Object Injection in WordPress The Barber Shop theme (Themeton)
CVE-2025-60230 WordPress The Barber Shop theme <= 1.9 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in Themeton The Barber Shop allows Object Injection. This issue affects The Barber Shop: from n/a through 1.9...
EUVD-2025-210244
Deserialization of Untrusted Data vulnerability in Themeton The Barber Shop allows Object Injection. This issue affects The Barber Shop: from n/a through 1.9...
CVE-2025-60230 WordPress The Barber Shop theme <= 1.9 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in Themeton The Barber Shop allows Object Injection. This issue affects The Barber Shop: from n/a through 1.9...
CVE-2025-60229
The CVE concerns the WordPress Lagom theme (versions
CVE-2025-60229 WordPress Lagom theme <= 2.0 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in Themeton Lagom allows Object Injection. This issue affects Lagom: from n/a through 2.0...
EUVD-2025-210243
Deserialization of Untrusted Data vulnerability in Themeton Lagom allows Object Injection. This issue affects Lagom: from n/a through 2.0...
CVE-2025-60229 WordPress Lagom theme <= 2.0 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in Themeton Lagom allows Object Injection. This issue affects Lagom: from n/a through 2.0...
EUVD-2026-37698
Unauthenticated PHP Object Injection in Moderno 1.43 versions...
CVE-2026-49108
The CVE concerns WordPress Moderno theme versions prior to 1.43, where an unauthenticated PHP Object Injection vulnerability exists in the Moderno theme. The root cause is a PHP object injection flaw within the theme (exploitable without authentication). CVSS details indicate a critical impact (C...