PT-2026-21186

Name of the Vulnerable Software and Affected Versions ThemeREX Lorem Ipsum | Books & Media Store versions through 1.2.6 Description The software contains a flaw related to the deserialization of untrusted data, which allows for object injection. This could potentially allow an attacker to...

PT-2026-21094

Name of the Vulnerable Software and Affected Versions Ippsum versions through 1.2.0 Description A flaw exists in Ippsum that allows for object injection due to deserialization of untrusted data. This condition can be exploited by an attacker to potentially compromise the system. Recommendations...

PT-2026-21226

Name of the Vulnerable Software and Affected Versions Applay - Shortcodes versions through 3.7 Description A flaw exists in the Applay - Shortcodes application that allows for object injection due to deserialization of untrusted data. This issue impacts the application's functionality related to...

WordPress plugin Booking and Rental Manager code vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There is...

PT-2026-21185

Name of the Vulnerable Software and Affected Versions ThemeREX Extreme Store versions through 1.5.7 Description A flaw exists in ThemeREX Extreme Store that allows for object injection due to deserialization of untrusted data. This condition can be exploited by an attacker to potentially compromi...

CVE-2026-24892: Deserialization of Untrusted Data

openITCOCKPIT is an open source monitoring tool built for different monitoring engines like Nagios, Naemon and Prometheus. openITCOCKPIT Community Edition 5.3.1 and earlier contains an unsafe PHP deserialization pattern in the processing of changelog entries. Serialized changelog data derived fro...

PT-2026-21065

Name of the Vulnerable Software and Affected Versions BoldThemes Travelicious versions prior to 1.6.7 Description The software contains a flaw due to deserialization of untrusted data, which allows for object injection. This could potentially allow an attacker to manipulate serialized data and...

CVE-2026-22384: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in leafcolor Applay - Shortcodes applay-shortcodes allows Object Injection.This issue affects Applay - Shortcodes: from n/a through = 3.7...

PT-2026-21112

Name of the Vulnerable Software and Affected Versions Kleor Contact Manager versions through 9.1.1 Description A flaw exists in Kleor Contact Manager that allows for object injection due to deserialization of untrusted data. This issue impacts the contact-manager component. Recommendations At the...

CVE-2025-69370: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in ThemeGoods Capella capella allows Object Injection.This issue affects Capella: from n/a through = 2.5.5...

PT-2026-21151

Name of the Vulnerable Software and Affected Versions ThemeGoods Capella versions through 2.5.5 Description A flaw exists in ThemeGoods Capella that allows for object injection due to deserialization of untrusted data. This can lead to unauthorized code execution. Recommendations Update to a...

PT-2026-21196

Name of the Vulnerable Software and Affected Versions A WP Life Image Gallery – Lightbox Gallery, Responsive Photo Gallery, Masonry Gallery versions through 1.6.0 Description The software contains a flaw related to the deserialization of untrusted data, specifically allowing for object injection...

PT-2026-21064

Name of the Vulnerable Software and Affected Versions BoldThemes Nestin versions prior to 1.2.6 Description A flaw exists in BoldThemes Nestin that allows for object injection due to deserialization of untrusted data. This issue could potentially allow an attacker to compromise the system...

CVE-2025-67995: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in LoftOcean PatioTime patiotime allows Object Injection.This issue affects PatioTime: from n/a through 2.1...

PT-2026-21063

Name of the Vulnerable Software and Affected Versions LoftOcean PatioTime versions prior to 2.1 Description A flaw exists in LoftOcean PatioTime that allows for object injection due to deserialization of untrusted data. This issue impacts the application's handling of data, potentially allowing a...

WordPress Contact Manager plugin code vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There we...

CVE-2025-69405: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in ThemeREX Lorem Ipsum | Books & Media Store lorem-ipsum-books-media-store allows Object Injection.This issue affects Lorem Ipsum | Books & Media Store: from n/a through = 1.2.11...

CVE-2025-69382: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in themesflat Themesflat Elementor themesflat-elementor allows Object Injection.This issue affects Themesflat Elementor: from n/a through = 1.0.1...

PT-2026-21090

Name of the Vulnerable Software and Affected Versions ModelTheme Addons for WPBakery and Elementor versions prior to 1.5.6 Description A flaw exists in ModelTheme Addons for WPBakery and Elementor that allows for Object Injection due to deserialization of untrusted data. This issue impacts the...

PT-2026-21089

Name of the Vulnerable Software and Affected Versions Modal Popup Box versions through 1.6.1 Description The software contains a flaw related to the deserialization of untrusted data, which allows for object injection. This issue impacts the Modal Popup Box plugin. Recommendations Update to a...