4028 matches found
PT-2026-86406
Name of the Vulnerable Software and Affected Versions Mail Mint – Email Marketing, Newsletter, Email Automation & WooCommerce Emails versions prior to 1.31.1 Description This issue involves PHP Object Injection caused by the deserialization of untrusted input within the handle form submission...
PT-2026-86327
Name of the Vulnerable Software and Affected Versions Welcart e-Commerce plugin for WordPress versions prior to 2.12.2 Description PHP Object Injection occurs due to the deserialization of untrusted input within the Telecom EDY payment callback usces action acting transaction. Unauthenticated...
CVE-2026-52777
CVE-2026-52777 affects YesWiki (a PHP wiki system) prior to version 4.6.6 . The vulnerability is an authenticated PHP object injection in BazarImportAction via an unrestricted unserialize() call in tools/bazar/services/CSVManager.php::importEntry(), which lacks the ['allowed_classes' => false]...
CVE-2026-52777 YesWiki: Authenticated PHP Object Injection in BazarImportAction via unserialize
YesWiki is a wiki system written in PHP. Prior to version 4.6.6, there is an authenticated PHP object injection vulnerability in BazarImportAction via unserialize. This issue has been patched in version 4.6.6...
CVE-2026-7654
CVE-2026-7654 CVE-2026-7654 Admin Columns PHP Object Injection RCE Exploit...
CVE-2026-49085
CVE-2026-49085 CVE-2026-49085 WP Insightly PHP Object Injection Exploit...
WordPress Welcart e-Commerce plugin <= 2.12.1 - Unauthenticated Arbitrary File Deletion via PHP Object Injection via 'reserve' Checkout Parameter and 'option' EDY Callback vulnerability
Unauthenticated Arbitrary File Deletion via PHP Object Injection via 'reserve' Checkout Parameter and 'option' EDY Callback vulnerability discovered by daroo in WordPress Plugin Welcart e-Commerce versions = 2.12.1...
CVE-2024-12877
CVE-2024-12877 GiveWP – Donation Plugin and Fundraising Platform = 3.19.2 - Unauthenticated PHP Object Injection Description The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.19.2 via...
CVE-2026-84752
Contributor PHP Object Injection in RTMKit = 2.1.5 versions...
CVE-2026-84753
Unauthenticated PHP Object Injection in Mail Mint = 1.31.0 versions...
EUVD-2026-70565
Unauthenticated PHP Object Injection in JobSearch = 3.2.0 versions...
CVE-2026-84834
CVE-2026-84834 affects the WordPress JobSearch plugin in versions ≤ 3.2.0 . The vulnerability is an unauthenticated PHP Object Injection , allowing a remote attacker with no privileges to potentially achieve high impact on confidentiality, integrity, and availability, as reflected by a CVSS 3.1 s...
CVE-2026-84834 WordPress JobSearch plugin <= 3.2.0 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in JobSearch = 3.2.0 versions...
CVE-2026-84753 WordPress Mail Mint plugin <= 1.31.0 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Mail Mint = 1.31.0 versions...
CVE-2026-84753
CVE-2026-84753 affects the WordPress Mail Mint plugin in versions 1.31.0 and below , where an unauthenticated PHP Object Injection flaw allows a remote attacker to inject arbitrary serialized objects into the application. The vulnerability is rated CVSS 9.8 (CRITICAL) with high impact to confiden...
EUVD-2026-70589
Unauthenticated PHP Object Injection in Mail Mint = 1.31.0 versions...
CVE-2026-84752 WordPress RTMKit plugin <= 2.1.5 - PHP Object Injection vulnerability
Contributor PHP Object Injection in RTMKit = 2.1.5 versions...
CVE-2026-84752
CVE-2026-84752 affects the WordPress RTMKit plugin (Rometheme for Elementor) in versions 2.1.5 and earlier . The vulnerability is a PHP Object Injection that can be exploited by a user with Contributor privileges, resulting in high impact on confidentiality, integrity, and availability (CVSS 8.8 ...