41962 matches found
CVE-2026-62107
Masteriyo – LMS is a WordPress LMS plugin affected by an unauthenticated PHP Object Injection vulnerability in versions ≤ 3.4.0 . The flaw allows an attacker to inject a malicious serialized PHP object, potentially leading to full compromise of the site. The Patchstack CVSS 3.1 score is 8.8 (HIGH...
CVE-2026-62107 WordPress Masteriyo - LMS plugin <= 3.4.0 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Masteriyo - LMS = 3.4.0 versions...
EUVD-2026-76197
Unauthenticated PHP Object Injection in ThemeREX Addons 2.45.0 versions...
CVE-2026-62105
CVE-2026-62105 affects the ThemeREX Addons WordPress plugin in versions prior to 2.45.0 , introducing an unauthenticated PHP Object Injection vulnerability. The flaw is exploitable over the network with low complexity, requires no privileges or user interaction, and is scored CVSS 3.1: 9.8 (Criti...
EUVD-2026-76214
Unauthenticated PHP Object Injection in Everest Forms = 3.6.0 versions...
CVE-2026-62103
CVE-2026-62103 affects the WordPress Everest Forms plugin in versions 3.6.0 and earlier . The vulnerability is an unauthenticated PHP Object Injection , rated CVSS 9.8 (Critical) by Patchstack, with high impact on confidentiality, integrity, and availability. No user interaction is required. A si...
CVE-2026-62103 WordPress Everest Forms plugin <= 3.6.0 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Everest Forms = 3.6.0 versions...
CVE-2026-62105 WordPress ThemeREX Addons plugin < 2.45.0 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in ThemeREX Addons 2.45.0 versions...
CVE-2026-62105 WordPress ThemeREX Addons plugin < 2.45.0 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in ThemeREX Addons 2.45.0 versions...
CVE-2026-62103 WordPress Everest Forms plugin <= 3.6.0 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Everest Forms = 3.6.0 versions...
EUVD-2026-76216
Unauthenticated Insecure Direct Object References IDOR in Quiz And Survey Master = 11.2.5 versions...
CVE-2026-62140 WordPress Quiz And Survey Master plugin <= 11.2.5 - Insecure Direct Object References (IDOR) vulnerability
Unauthenticated Insecure Direct Object References IDOR in Quiz And Survey Master = 11.2.5 versions...
CVE-2026-62140
CVE-2026-62140 affects the WordPress plugin Quiz And Survey Master in versions
WordPress Masteriyo - LMS plugin <= 3.4.0 - PHP Object Injection vulnerability
WordPress Masteriyo - LMS plugin = 3.4.0 - PHP Object Injection vulnerability discovered by 20kilograma in WordPress Plugin Masteriyo - LMS versions = 3.4.0...
WordPress ThemeREX Addons plugin < 2.45.0 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by nh4tvd in WordPress Plugin ThemeREX Addons versions 2.45.0...
ROOT-APP-NPM-CVE-2021-23329 CVE-2021-23329 in nested-object-assign - Patched by Root
Root has patched CVE-2021-23329 in the nested-object-assign package for Root:npm. Multiple fixed versions available...
WordPress Everest Forms plugin <= 3.6.0 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by LueRader in WordPress Plugin Everest Forms versions = 3.6.0...
WordPress Site Reviews plugin 7.2.2-8.2.2 - Unauthenticated PHP Object Injection vulnerability
Unauthenticated PHP Object Injection vulnerability discovered by Jakub Herman in WordPress Plugin Site Reviews versions 7.2.2-8.2.2...
WordPress Weaver Show Posts plugin < 1.8.1 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by Do Xuan Trung in WordPress Plugin Weaver Show Posts versions 1.8.1...
