CVE-2025-57321

The CVE-2025-57321 entry concerns magix-combine-ex. A prototype pollution flaw exists in util-deps.addFileDepend, allowing crafted payloads to inject properties into Object.prototype, with the minimum impact described as a DoS. Affected versions are stated as magix-combine-ex through 1.2.10 (and ...

WordPress DentiCare Theme < 1.4.3 - PHP Object Injection Vulnerability

PHP Object Injection Vulnerability discovered by Bonds Patchstack Alliance in WordPress Theme DentiCare versions 1.4.3...

WordPress Sign-up Sheets Plugin <= 2.3.2 - PHP Object Injection Vulnerability

PHP Object Injection Vulnerability discovered by ChuongVN in WordPress Plugin Sign-up Sheets versions = 2.3.2...

WordPress Goldenblatt theme < 1.3.0 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Bonds in WordPress Theme Goldenblatt versions 1.3.0...

WordPress Addison theme < 1.4.8 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Bonds in WordPress Theme Addison versions 1.4.8...

WordPress DentiCare Theme < 1.4.3 is vulnerable to PHP Object Injection

Software DentiCare Type Theme Vulnerable versions 1.4.3 Fixed in 1.4.3 OWASP Top 10 A3: Injection Classification PHP Object Injection CVE CVE-2025-54723 Patch priority High CVSS severity High 9.8 Developer Claim ownership PSID c2cef3d0d976 Credits Bonds Required privilege Unauthenticated Publishe...

WordPress GSheets Connector Plugin <= 1.1.1 - PHP Object Injection Vulnerability

PHP Object Injection Vulnerability discovered by Drew / mcdruid in WordPress Plugin GSheets Connector versions = 1.1.1...

WordPress ConveyThis plugin <= 269.1 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by mcdruid in WordPress Plugin ConveyThis versions = 269.1...

CVE-2025-58662

Deserialization of Untrusted Data vulnerability in awesomesupport Awesome Support awesome-support allows Object Injection.This issue affects Awesome Support: from n/a through = 6.3.5...

CVE-2025-58244

Cross-Site Request Forgery CSRF vulnerability in Anps Constructo constructo allows Object Injection.This issue affects Constructo: from n/a through = 4.3.9...

CVE-2025-57919

Deserialization of Untrusted Data vulnerability in ConveyThis ConveyThis conveythis-translate allows Object Injection.This issue affects ConveyThis: from n/a through = 269.1...

CVE-2025-53465

Deserialization of Untrusted Data vulnerability in raoinfotech GSheets Connector sheetlink allows Object Injection.This issue affects GSheets Connector: from n/a through = 1.1.1...

CVE-2025-53465 WordPress GSheets Connector Plugin <= 1.1.1 - PHP Object Injection Vulnerability

Deserialization of Untrusted Data vulnerability in raoinfotech GSheets Connector sheetlink allows Object Injection.This issue affects GSheets Connector: from n/a through = 1.1.1...

CVE-2025-53465 WordPress GSheets Connector Plugin <= 1.1.1 - PHP Object Injection Vulnerability

Deserialization of Untrusted Data vulnerability in raoinfotech GSheets Connector allows Object Injection. This issue affects GSheets Connector: from n/a through 1.1.1...

CVE-2025-53465

CVE-2025-53465 describes a deserialization of untrusted data vulnerability in the raoinfotech GSheets Connector. This allows Object Injection and affects the GSheets Connector versions from n/a through 1.1.1. The CVSS 3.1 base score is 7.2 (High) with network attack vector, low attack complexity,...

CVE-2025-57919

CVE-2025-57919 is a deserialization/ PHP Object Injection vulnerability in Translate WordPress with ConveyThis (WordPress ConveyThis Language Translate Widget), affecting the ConveyThis translation widget up to version 266. The CIRCL sighting confirms an authenticated (Administrator+) PHP Object ...

CVE-2025-57919 WordPress ConveyThis plugin <= 269.1 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in ConveyThis ConveyThis conveythis-translate allows Object Injection.This issue affects ConveyThis: from n/a through = 269.1...

CVE-2025-57919 WordPress ConveyThis plugin <= 269.1 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in ConveyThis ConveyThis conveythis-translate allows Object Injection.This issue affects ConveyThis: from n/a through = 269.1...

CVE-2025-58244

CVE-2025-58244 (Constructo) is a CSRF-related vulnerability in the Constructo WordPress theme that, per the provided documents, allows object injection. Affected software ranges to Constructo versions up to 4.3.9. The CVE description and related references (including Wordfence summaries) confirm ...

CVE-2025-58244 WordPress Constructo Theme <= 4.3.9 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in Anps Constructo constructo allows Object Injection.This issue affects Constructo: from n/a through = 4.3.9...