CVE-2026-62021: Deserialization of Untrusted Data

Subscriber PHP Object Injection in Angio = 1.1.1 versions...

CVE-2026-42630: Insertion of Sensitive Information Into Sent Data

Unauthenticated Sensitive Data Exposure in Web Plura Backup & Restore Manager = 0.2.25 versions...

CVE-2026-42419: Insertion of Sensitive Information Into Sent Data

Unauthenticated Sensitive Data Exposure in Swish Migrate and Backup = 1.4.0 versions...

CVE-2026-62044: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in bPlugins Super Video Player super-video-player allows Object Injection.This issue affects Super Video Player: from n/a through 1.8.13...

CVE-2026-93944: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in ThemeREX Group Camelia camelia allows Object Injection.This issue affects Camelia: from n/a through 1.2.15...

CVE-2026-93937: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in ThemeREX Group Hygia hygia allows Object Injection.This issue affects Hygia: from n/a through 1.21.0...

CVE-2026-93936: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in ThemeREX Group IPharm ipharm allows Object Injection.This issue affects IPharm: from n/a through 1.2.4...

CVE-2026-93927: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in Axiomthemes Veto veto allows Object Injection.This issue affects Veto: from n/a through 1.6.0...

CVE-2026-106606: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in YITH YITH WooCommerce Affiliates yith-woocommerce-affiliates allows Object Injection.This issue affects YITH WooCommerce Affiliates: from n/a through 3.31.0...

PT-2026-109699

Name of the Vulnerable Software and Affected Versions VillaTheme AFFI – Affiliate Marketing for WooCommerce versions prior to 1.0.11 Description An Object Injection issue exists due to the deserialization of untrusted data. This occurs when the application processes specially crafted serialized...

CVE-2026-93929: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in ThemeREX Group Travesia travesia allows Object Injection.This issue affects Travesia: from n/a through 1.1.16...

CVE-2026-93941: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in ThemeREX Group Edema edema allows Object Injection.This issue affects Edema: from n/a through 1.2.2.2...

PT-2026-109821

Name of the Vulnerable Software and Affected Versions Avala versions prior to 1.1.5 Description An unauthenticated PHP Object Injection issue exists, which occurs due to the deserialization of untrusted data. This allows an attacker to inject malicious PHP objects into the application...

PT-2026-109840

Name of the Vulnerable Software and Affected Versions Invetex versions 2.18 and earlier Description An unauthenticated PHP Object Injection issue exists, which occurs due to the deserialization of untrusted data. This allows an attacker to inject malicious PHP objects into the application...

PT-2026-109580

Name of the Vulnerable Software and Affected Versions Let's Play versions prior to 1.1.16 Description Deserialization of untrusted data in the playhockey component allows Object Injection. Object Injection occurs when untrusted data is used to abuse the logic of an application by injecting...

PT-2026-109579

Name of the Vulnerable Software and Affected Versions Partiso versions prior to 1.1.14 Description ThemeREX Group Partiso is subject to a deserialization of untrusted data issue that allows Object Injection. Object Injection occurs when untrusted data is used to abuse the logic of an application ...

PT-2026-109810

Name of the Vulnerable Software and Affected Versions Yacht Rental versions 2.6 and earlier Description An unauthenticated PHP Object Injection issue exists, which occurs during the deserialization of untrusted data. This allows an attacker to inject malicious objects into the application without...

PT-2026-109807

Name of the Vulnerable Software and Affected Versions Stargaze versions 1.10 and earlier Description An unauthenticated PHP Object Injection issue exists, which occurs due to the deserialization of untrusted data. This allows an attacker to inject malicious PHP objects into the application...

PT-2026-109806

Name of the Vulnerable Software and Affected Versions Splendour versions 1.23 and earlier Description An unauthenticated PHP Object Injection issue exists, which occurs due to the deserialization of untrusted data. This allows an attacker to inject malicious PHP objects into the application...

PT-2026-109854

Name of the Vulnerable Software and Affected Versions Anesta versions prior to 1.5.4 Description An unauthenticated PHP Object Injection issue exists, which occurs due to the deserialization of untrusted data. This allows an attacker to inject malicious PHP objects into the application...