62 matches found
CVE-2026-16267
The CVE-2026-16267 issue affects the Newsletters WordPress plugin prior to version 4.16, where unserialising a value from a public form submission does not restrict allowed classes, enabling unauthenticated attackers to inject arbitrary PHP objects. This is a high-severity, remote vulnerability w...
CVE-2026-65579
Unauthenticated PHP Object Injection in Agricola = 1.21.0 versions...
CVE-2026-65581
Unauthenticated PHP Object Injection in AI ANN = 1.29.0 versions...
CVE-2026-65578
Unauthenticated PHP Object Injection in Agora = 1.9 versions...
CVE-2026-65572
Unauthenticated PHP Object Injection in A.Williams = 1.3.1 versions...
CVE-2026-65556
Unauthenticated PHP Object Injection in WPBruiser no- Captcha anti-Spam = 3.1.43 versions...
CVE-2026-65581 WordPress AI ANN theme <= 1.29.0 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in AI ANN = 1.29.0 versions...
CVE-2026-65578 WordPress Agora theme <= 1.9 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Agora = 1.9 versions...
CVE-2026-65572
The CVE-2026-65572 entry concerns the WordPress A.Williams theme (versions
EUVD-2026-53991
Unauthenticated PHP Object Injection in Abelle = 1.22 versions...
CVE-2026-65573
CVE-2026-65573 is an unauthenticated PHP Object Injection vulnerability affecting the WordPress theme Abelle in versions 1.22 and earlier . The connected documents consistently describe the issue as a PHP Object Injection vulnerability that does not require authentication, with impact metrics ind...
EUVD-2026-53989
Unauthenticated PHP Object Injection in 69 Clothing = 1.2.11.1 versions...
CVE-2025-15672 Chama < 1.0.13 - Unauthenticated PHP Object Injection
The ChamaWP WordPress plugin before 1.0.13 does not properly validate user input before passing it to a PHP deserialization function, allowing unauthenticated attackers to inject arbitrary PHP objects, which could lead to remote code execution when a suitable gadget chain is present via other...
CVE-2026-57677
Unauthenticated PHP Object Injection in Novalnet Payment Gateway for WooCommerce = 12.10.3 versions...
Exploit for Deserialization of Untrusted Data in Presstigers Simple_Job_Board
CVE-2024-1813 - Simple Job Board ≤ 2.11.0 WordPress - Unauth...
EUVD-2026-37642
Unauthenticated PHP Object Injection in WP Activity Log = 5.6.3.1 versions...
EUVD-2026-37676
Unauthenticated PHP Object Injection in Mildhill = 1.5 versions...
CVE-2026-39445
Unauthenticated PHP Object Injection in Alukas 3.0.0 versions...