11417 matches found
PT-2026-27826
Name of the Vulnerable Software and Affected Versions AncoraThemes Morning Records versions through 1.2 Description The software contains a flaw due to deserialization of untrusted data, which allows for object injection. Recommendations At the moment, there is no information about a newer versio...
WordPress plugin Kamperen 代码问题漏洞
WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. Versions...
WordPress plugin EventPrime 代码问题漏洞
WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There is...
WordPress plugin Apicona 代码问题漏洞
WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. WordPres...
PT-2026-27874
Name of the Vulnerable Software and Affected Versions NooTheme Visionary Core versions n/a through 1.4.9 Description An issue exists in NooTheme Visionary Core that allows for object injection due to deserialization of untrusted data. This impacts the noo-visionary-core component. Recommendations...
CVE-2026-24981: Deserialization of Untrusted Data
Deserialization of Untrusted Data vulnerability in NooTheme Visionary Core noo-visionary-core allows Object Injection.This issue affects Visionary Core: from n/a through = 1.4.9...
PT-2026-27831
Name of the Vulnerable Software and Affected Versions AncoraThemes Melody versions n/a through 1.6.3 Description A flaw exists in the deserialization of untrusted data within AncoraThemes Melody melodyschool, potentially allowing for object injection. This issue could allow an attacker to inject...
PT-2026-27965
Name of the Vulnerable Software and Affected Versions WooCommerce Infinite Scroll versions through 1.6.2 Description The software contains a flaw related to the deserialization of untrusted data, which can lead to object injection. Recommendations Update WooCommerce Infinite Scroll to a version...
CVE-2026-27045: Deserialization of Untrusted Data
Deserialization of Untrusted Data vulnerability in sbthemes WooCommerce Infinite Scroll sb-woocommerce-infinite-scroll allows Object Injection.This issue affects WooCommerce Infinite Scroll: from n/a through = 1.6.2...
CVE-2026-25400: Deserialization of Untrusted Data
Deserialization of Untrusted Data vulnerability in thememount Apicona apicona allows Object Injection.This issue affects Apicona: from n/a through = 24.1.0...
WordPress plugin Morning Records 代码问题漏洞
WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. WordPres...
PT-2026-27921
Name of the Vulnerable Software and Affected Versions rascals Vex versions prior to 1.2.9 Description An issue exists in rascals Vex that allows for object injection due to deserialization of untrusted data. This impacts the Vex component. Recommendations Update rascals Vex to version 1.2.9 or...
CVE-2026-32508: Deserialization of Untrusted Data
Deserialization of Untrusted Data vulnerability in Mikado-Themes Halstein halstein allows Object Injection.This issue affects Halstein: from n/a through 1.8...
CVE-2026-25030: Deserialization of Untrusted Data
Deserialization of Untrusted Data vulnerability in parkofideas Goldish goldish allows Object Injection.This issue affects Goldish: from n/a through 3.47...
PT-2026-28021
Name of the Vulnerable Software and Affected Versions Elated-Themes Leroux versions prior to 1.4 Description An issue exists in Elated-Themes Leroux that allows for object injection due to the deserialization of untrusted data. This impacts the software's ability to securely handle data input...
WordPress weForms plugin <= 1.6.26 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by daroo in WordPress Plugin weForms versions = 1.6.26...
WordPress Apicona theme <= 24.1.0 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme Apicona versions = 24.1.0...
WordPress Meloo theme < 2.8.2 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Meloo versions 2.8.2...