CVE-2026-27095

CVE-2026-27095 describes a PHP Object Injection vulnerability in the WordPress plugin Bus Ticket Booking with Seat Reservation (magepeopleteam bus-ticket-booking-with-seat-reservation). Affected versions are up to and including 5.6.0. Deserialization of untrusted data enables object injection, wi...