45818 matches found
PT-2026-50305
Unauthenticated PHP Object Injection in Mildhill = 1.5 versions...
PT-2026-50254
The Counter Box – Add Countdowns, Timers & Dynamic Counters to WordPress plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.0.13 via deserialization of untrusted input . This makes it possible for authenticated attackers, with administrator-level...
PT-2026-50274
Name of the Vulnerable Software and Affected Versions ThemeREX Addons versions prior to 2.36.1.2 Description Unauthenticated PHP Object Injection occurs in the software. PHP Object Injection is a vulnerability that allows an attacker to inject malicious objects into a PHP application, which can...
PT-2026-50326
Unauthenticated PHP Object Injection in AI Lab 5.4.2 versions...
PT-2026-50323
Unauthenticated Insecure Direct Object References IDOR in Salon booking system = 10.30.24 versions...
PT-2026-50302
Unauthenticated PHP Object Injection in Zermatt = 1.6.1 versions...
PT-2026-50321
Unauthenticated PHP Object Injection in EasyMeals = 1.5.1 versions...
PT-2026-50336
Contributor PHP Object Injection in JetEngine = 3.8.9.1 versions...
PT-2026-50345
Unauthenticated PHP Object Injection in JetEngine = 3.8.10 versions...
PT-2026-50339
Unauthenticated PHP Object Injection in Thrive Apprentice 10.8.10.2 versions...
PT-2026-50346
Unauthenticated Insecure Direct Object References IDOR in Clean Login = 1.15 versions...
PT-2026-50359
Unauthenticated PHP Object Injection in WP Activity Log = 5.6.3.1 versions...
PT-2026-50406
Unauthenticated PHP Object Injection in Manufaktur Solutions = 1.1.1 versions...
PT-2026-50398
Unauthenticated PHP Object Injection in Konsept = 1.9 versions...
PT-2026-50404
Name of the Vulnerable Software and Affected Versions ShiftUp versions 1.3 and earlier Description An unauthenticated PHP Object Injection issue exists in the software. PHP Object Injection occurs when user-supplied input is passed to the unserialize function without proper validation, potentiall...
PT-2026-50408
Unauthenticated PHP Object Injection in Château = 1.2.1 versions...
PT-2026-50396
Unauthenticated PHP Object Injection in Alukas 3.0.0 versions...
PT-2026-50387
Deserialization of Untrusted Data vulnerability in EMV The Hospital nrghospital allows Object Injection. This issue affects The Hospital: from n/a through 1.8.1...