CVE-2025-67997: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in BoldThemes Travelicious travelicious allows Object Injection.This issue affects Travelicious: from n/a through 1.6.7...

WordPress plugin Booking and Rental Manager code vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There is...

PT-2026-21185

Name of the Vulnerable Software and Affected Versions ThemeREX Extreme Store versions through 1.5.7 Description A flaw exists in ThemeREX Extreme Store that allows for object injection due to deserialization of untrusted data. This condition can be exploited by an attacker to potentially compromi...

CVE-2026-24892: Deserialization of Untrusted Data

openITCOCKPIT is an open source monitoring tool built for different monitoring engines like Nagios, Naemon and Prometheus. openITCOCKPIT Community Edition 5.3.1 and earlier contains an unsafe PHP deserialization pattern in the processing of changelog entries. Serialized changelog data derived fro...

PT-2026-21065

Name of the Vulnerable Software and Affected Versions BoldThemes Travelicious versions prior to 1.6.7 Description The software contains a flaw due to deserialization of untrusted data, which allows for object injection. This could potentially allow an attacker to manipulate serialized data and...

CVE-2026-22384: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in leafcolor Applay - Shortcodes applay-shortcodes allows Object Injection.This issue affects Applay - Shortcodes: from n/a through = 3.7...

PT-2026-21151

Name of the Vulnerable Software and Affected Versions ThemeGoods Capella versions through 2.5.5 Description A flaw exists in ThemeGoods Capella that allows for object injection due to deserialization of untrusted data. This can lead to unauthorized code execution. Recommendations Update to a...

PT-2026-21196

Name of the Vulnerable Software and Affected Versions A WP Life Image Gallery – Lightbox Gallery, Responsive Photo Gallery, Masonry Gallery versions through 1.6.0 Description The software contains a flaw related to the deserialization of untrusted data, specifically allowing for object injection...

PT-2026-21064

Name of the Vulnerable Software and Affected Versions BoldThemes Nestin versions prior to 1.2.6 Description A flaw exists in BoldThemes Nestin that allows for object injection due to deserialization of untrusted data. This issue could potentially allow an attacker to compromise the system...

CVE-2025-67995: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in LoftOcean PatioTime patiotime allows Object Injection.This issue affects PatioTime: from n/a through 2.1...

PT-2026-21063

Name of the Vulnerable Software and Affected Versions LoftOcean PatioTime versions prior to 2.1 Description A flaw exists in LoftOcean PatioTime that allows for object injection due to deserialization of untrusted data. This issue impacts the application's handling of data, potentially allowing a...

CVE-2025-69382: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in themesflat Themesflat Elementor themesflat-elementor allows Object Injection.This issue affects Themesflat Elementor: from n/a through = 1.0.1...

PT-2026-21090

Name of the Vulnerable Software and Affected Versions ModelTheme Addons for WPBakery and Elementor versions prior to 1.5.6 Description A flaw exists in ModelTheme Addons for WPBakery and Elementor that allows for Object Injection due to deserialization of untrusted data. This issue impacts the...

PT-2026-21089

Name of the Vulnerable Software and Affected Versions Modal Popup Box versions through 1.6.1 Description The software contains a flaw related to the deserialization of untrusted data, which allows for object injection. This issue impacts the Modal Popup Box plugin. Recommendations Update to a...

CVE-2025-68526: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in A WP Life Modal Popup Box modal-popup-box allows Object Injection.This issue affects Modal Popup Box: from n/a through = 1.6.1...

PT-2026-21201

Name of the Vulnerable Software and Affected Versions Dotstore Woocommerce Category Banner Management versions through 2.5.1 Description The software contains a flaw due to deserialization of untrusted data, which allows for object injection. This issue is present in the Woocommerce Category Bann...

CVE-2026-22354: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in Dotstore Woocommerce Category Banner Management banner-management-for-woocommerce allows Object Injection.This issue affects Woocommerce Category Banner Management: from n/a through = 2.5.1...

PT-2026-21153

Name of the Vulnerable Software and Affected Versions AncoraThemes SevenHills versions through 1.6.2 Description The software contains a flaw due to deserialization of untrusted data, which allows for object injection. Recommendations Update AncoraThemes SevenHills to a version newer than 1.6.2...

PT-2026-21143

Name of the Vulnerable Software and Affected Versions Booking and Rental Manager versions through 2.5.9 Description The software contains a flaw due to deserialization of untrusted data, which allows for object injection. This issue impacts the Booking and Rental Manager plugin for WooCommerce...

CVE-2025-69328: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in magepeopleteam Booking and Rental Manager booking-and-rental-manager-for-woocommerce allows Object Injection.This issue affects Booking and Rental Manager: from n/a through = 2.5.9...