CVE-2026-49763: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Integration for Contact Form 7 HubSpot = 1.3.7 versions...

CVE-2026-49109: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Integration for Salesforce and Contact Form 7, WPForms, Elementor, Formidable, Ninja Forms = 1.4.3 versions...

CVE-2026-49105: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in WP Zendesk for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms = 1.1.4 versions...

CVE-2026-49104: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Integration for Keap/infusionsoft and Contact Form 7, WPForms, Elementor, Formidable, Ninja Forms = 1.2.1 versions...

CVE-2026-49085: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in WP Insightly for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms = 1.1.4 versions...

CVE-2026-42687: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in EventPrime = 4.3.2.1 versions...

CVE-2026-39532: Deserialization of Untrusted Data

Contributor PHP Object Injection in Events Calendar for GeoDirectory = 2.3.25 versions...

CVE-2026-39498: Deserialization of Untrusted Data

Shop manager PHP Object Injection in YayMail = 4.3.3 versions...

CVE-2026-39499: Deserialization of Untrusted Data

Shop manager PHP Object Injection in Advanced Product Fields Product Addons for WooCommerce = 1.6.19 versions...

CVE-2026-39474: Deserialization of Untrusted Data

Contributor PHP Object Injection in Post Duplicator = 3.0.10 versions...

CVE-2026-39472: Deserialization of Untrusted Data

Shop manager PHP Object Injection in WooCommerce PDF Invoices & Packing Slips 5.9.0 versions...

CVE-2026-27053: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Broadcast Live Video 7.1.3 versions...

PT-2026-49170

Name of the Vulnerable Software and Affected Versions jsonata-js jsonata versions prior to 2.2.1 Description A weakness in the Function Binding Frame System component allows for prototype pollution, which is the improperly controlled modification of object prototype attributes. This issue occurs...

CVE-2026-39478: Deserialization of Untrusted Data

Contributor PHP Object Injection in Anti-Malware Security and Brute-Force Firewall = 4.23.87 versions...

CVE-2026-39471: Deserialization of Untrusted Data

Author PHP Object Injection in ShortPixel Image Optimizer = 6.4.3 versions...

PT-2026-49507

Unauthenticated PHP Object Injection in WP Zendesk for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms = 1.1.4 versions...

PT-2026-49399

Contributor PHP Object Injection in Events Calendar for GeoDirectory = 2.3.25 versions...

Google Chrome GPU resource management error vulnerability (CNVD-2026-25117)

Google Chrome is a cross-platform web browser developed by Google. It is primarily used for accessing web pages, running web applications, and providing various extended features. There is a resource management vulnerability in Google Chrome, which stems from improper handling of references after...

CVE-2026-49770: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in WP Travel Engine = 6.7.12 versions...

PT-2026-49511

Name of the Vulnerable Software and Affected Versions Integration for Contact Form 7 HubSpot versions prior to 1.3.8 Description An unauthenticated PHP Object Injection issue exists. PHP Object Injection occurs when untrusted input is passed to the PHP unserialize function, allowing an attacker t...