CVE-2026-32470

creationtimestamp| type| source ---|---|--- 2026-08-18 16:08:26+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtelzmsgx523 2026-08-18 17:20:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtepzq4wk32c...

CVE-2026-32470

Unauthenticated PHP Object Injection in FundEngine = 1.7.9 versions...

CVE-2026-32470 WordPress FundEngine plugin <= 1.7.9 - PHP Object Injection vulnerability

Unauthenticated PHP Object Injection in FundEngine = 1.7.9 versions...

CVE-2026-32470

The WordPress FundEngine plugin (versions ≤ 1.7.9) is vulnerable to unauthenticated PHP Object Injection, discovered by researcher daroo. CVSS 3.1 scores this critical (9.8) with network attack vector, no privileges or user interaction required, impacting confidentiality, integrity, and availabil...