11314 matches found
PT-2026-49508
Unauthenticated PHP Object Injection in Integration for Contact Form 7 and Constant Contact = 1.1.6 versions...
PT-2026-49343
Name of the Vulnerable Software and Affected Versions WP Travel Engine versions prior to 6.7.13 Description An unauthenticated PHP Object Injection exists in the software. PHP Object Injection occurs when user-supplied input is passed to the PHP unserialize function without proper validation,...
CVE-2026-49105: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in WP Zendesk for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms = 1.1.4 versions...
PT-2026-49379
Contributor PHP Object Injection in Post Duplicator = 3.0.10 versions...
CVE-2026-49763: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in Integration for Contact Form 7 HubSpot = 1.3.7 versions...
CVE-2026-49104: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in Integration for Keap/infusionsoft and Contact Form 7, WPForms, Elementor, Formidable, Ninja Forms = 1.2.1 versions...
PT-2026-49386
Shop manager PHP Object Injection in Advanced Product Fields Product Addons for WooCommerce = 1.6.19 versions...
PT-2026-49461
Unauthenticated PHP Object Injection in EventPrime = 4.3.2.1 versions...
CVE-2026-49770: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in WP Travel Engine = 6.7.12 versions...
CVE-2026-49769: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in wpForo Forum = 3.1.0 versions...
PT-2026-49382
Author PHP Object Injection in Modula Image Gallery = 2.14.18 versions...
PT-2026-49358
Unauthenticated PHP Object Injection in Broadcast Live Video 7.1.3 versions...
PT-2026-49507
Unauthenticated PHP Object Injection in WP Zendesk for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms = 1.1.4 versions...
CVE-2026-39478: Deserialization of Untrusted Data
Contributor PHP Object Injection in Anti-Malware Security and Brute-Force Firewall = 4.23.87 versions...
CVE-2026-39481: Deserialization of Untrusted Data
Author PHP Object Injection in Modula Image Gallery = 2.14.18 versions...
CVE-2026-39498: Deserialization of Untrusted Data
Shop manager PHP Object Injection in YayMail = 4.3.3 versions...
CVE-2026-39499: Deserialization of Untrusted Data
Shop manager PHP Object Injection in Advanced Product Fields Product Addons for WooCommerce = 1.6.19 versions...
CVE-2026-42687: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in EventPrime = 4.3.2.1 versions...
PT-2026-49377
Name of the Vulnerable Software and Affected Versions ShortPixel Image Optimizer versions prior to 6.4.4 Description PHP Object Injection occurs in the software. This issue allows an attacker to inject malicious objects into the application, which can lead to unauthorized code execution or other...