CVE-2025-69122: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in SeaFood Company = 1.4 versions...

CVE-2025-69108: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Hot Coffee = 1.7 versions...

CVE-2026-12256: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in ThemeFusion Fusion Builder fusion-builder allows Object Injection.This issue affects Fusion Builder: from n/a through 3.15.3...

CVE-2026-12115: Deserialization of Untrusted Data

The Counter Box – Add Countdowns, Timers & Dynamic Counters to WordPress plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.0.13 via deserialization of untrusted input . This makes it possible for authenticated attackers, with administrator-level...

CVE-2026-40738: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Eldon = 1.4.1 versions...

PT-2026-50336

Contributor PHP Object Injection in JetEngine = 3.8.9.1 versions...

PT-2026-50407

Unauthenticated PHP Object Injection in Zoya = 1.4 versions...

PT-2026-50395

Unauthenticated PHP Object Injection in PressMart = 1.2.26 versions...

PT-2026-50321

Unauthenticated PHP Object Injection in EasyMeals = 1.5.1 versions...

PT-2026-50606

Name of the Vulnerable Software and Affected Versions Drupal core affected versions not specified Description An attacker with appropriate JSON:API write permissions could potentially inject a malicious payload in certain rare circumstances, leading to PHP Object Injection. PHP Object Injection...

PT-2026-50396

Unauthenticated PHP Object Injection in Alukas 3.0.0 versions...

CVE-2026-40733: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in ShiftUp = 1.3 versions...

CVE-2025-60236: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in EMV Creatify allows Object Injection. This issue affects Creatify: from n/a through 1.5...

CVE-2026-54806: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in WP Activity Log = 5.6.3.1 versions...

CVE-2026-52706: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in JetEngine = 3.8.10 versions...

CVE-2026-49107: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Thrive Apprentice 10.8.10.2 versions...

CVE-2025-60229: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in Themeton Lagom allows Object Injection. This issue affects Lagom: from n/a through 2.0...

CVE-2025-60231: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in EMV The Hospital nrghospital allows Object Injection. This issue affects The Hospital: from n/a through 1.8.1...

CVE-2026-54194: Deserialization of Untrusted Data

Contributor PHP Object Injection in Fusion Builder = 3.15.4 versions...

CVE-2025-69130: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in Pixel Makers Creative INC. Entrepreneur - Booking for Small Businesses WordPress Theme allows Object Injection. This issue affects Entrepreneur - Booking for Small Businesses WordPress Theme: from n/a before 3.1.5...