PT-2026-109809

Name of the Vulnerable Software and Affected Versions Wine House versions 3.20 and earlier Description An unauthenticated PHP Object Injection issue exists, which occurs due to the deserialization of untrusted data. This allows an attacker to inject malicious PHP objects into the application...

PT-2026-109808

Name of the Vulnerable Software and Affected Versions Tipsy versions 1.6 and earlier Description An unauthenticated PHP Object Injection issue exists, which occurs during the deserialization of untrusted data. This allows an attacker to inject malicious PHP objects into the application...

PT-2026-109779

Name of the Vulnerable Software and Affected Versions Payever - WooCommerce Gateway versions prior to 4.8.3 Description An unauthenticated PHP Object Injection issue exists, which occurs due to the deserialization of untrusted data. This allows an attacker to inject malicious PHP objects into the...

PT-2026-109762

Name of the Vulnerable Software and Affected Versions Swish Migrate and Backup versions prior to 1.4.1 Description An issue exists that allows unauthenticated users to access sensitive data. Recommendations Update to a version newer than 1.4.0...

PT-2026-109842

Name of the Vulnerable Software and Affected Versions Asia Garden versions 1.3.1 and earlier Description An unauthenticated PHP Object Injection issue exists, which occurs due to the deserialization of untrusted data. This allows an attacker to inject malicious PHP objects into the application...

PT-2026-109859

Name of the Vulnerable Software and Affected Versions Jacqueline versions 2.22 and earlier Description An unauthenticated PHP Object Injection issue exists, which occurs due to the deserialization of untrusted data. This allows an attacker to inject malicious PHP objects into the application...

PT-2026-109841

Name of the Vulnerable Software and Affected Versions N7 | Golf Club Sports & Events versions prior to 2.21 Description An unauthenticated PHP Object Injection issue exists, which occurs due to the deserialization of untrusted data. This allows an attacker to inject malicious PHP objects into the...

PT-2026-109581

Name of the Vulnerable Software and Affected Versions IPharm versions prior to 1.2.5 Description ThemeREX Group IPharm ipharm contains a deserialization of untrusted data flaw that allows Object Injection. Object Injection occurs when untrusted data is used to abuse the logic of an application by...

PT-2026-109848

Name of the Vulnerable Software and Affected Versions Drone Media versions 2.2.0 and earlier Description An unauthenticated PHP Object Injection issue exists, which occurs due to the deserialization of untrusted data. This allows an attacker to inject malicious PHP objects into the application...

PT-2026-109584

Name of the Vulnerable Software and Affected Versions Greeny versions prior to 2.10.1 Description Deserialization of untrusted data in the ThemeREX Group Greeny theme allows for Object Injection. Object Injection occurs when an application deserializes untrusted input, potentially allowing an...

PT-2026-109583

Name of the Vulnerable Software and Affected Versions Hogwords versions prior to 1.2.8 Description Deserialization of untrusted data in the Hogwords theme allows for Object Injection. This occurs when the application deserializes data from an untrusted source without sufficient validation,...

PT-2026-109703

Name of the Vulnerable Software and Affected Versions Super Video Player versions prior to 1.8.14 Description Deserialization of untrusted data in the bPlugins Super Video Player plugin allows for Object Injection. This occurs when the application deserializes data from an untrusted source withou...

PT-2026-109574

Name of the Vulnerable Software and Affected Versions Travesia versions prior to 1.1.17 Description Deserialization of untrusted data in the software allows Object Injection, a technique where an attacker can manipulate serialized objects to execute arbitrary code or interfere with application...

PT-2026-109582

Name of the Vulnerable Software and Affected Versions Hygia versions prior to 1.21.0 Description Deserialization of untrusted data in the software allows Object Injection, a technique where an attacker can manipulate serialized objects to execute arbitrary code or interfere with application logic...

PT-2026-109585

Name of the Vulnerable Software and Affected Versions Edema versions prior to 1.2.2.3 Description Deserialization of untrusted data in the ThemeREX Group Edema theme allows for Object Injection. Object Injection occurs when untrusted input is passed to a deserialization function, potentially...

PT-2026-109930

Name of the Vulnerable Software and Affected Versions JeecgBoot versions prior to 3.9.6 Description An authorization flaw exists in the embeddingSearch handler of the AiragKnowledgeController due to missing Shiro permission annotations. This allows authenticated users with low privileges to acces...

PT-2026-109849

Name of the Vulnerable Software and Affected Versions Education Center versions prior to 3.6.13 Description An unauthenticated PHP Object Injection issue exists, which occurs due to the deserialization of untrusted data. This allows an attacker to inject malicious PHP objects into the application...

PT-2026-109823

Name of the Vulnerable Software and Affected Versions Juno versions prior to 2.26 Description An unauthenticated PHP Object Injection issue exists, which occurs due to the deserialization of untrusted data. This allows an attacker to inject malicious PHP objects into the application...

PT-2026-109587

Name of the Vulnerable Software and Affected Versions Convex versions prior to 1.16.1 Description ThemeREX Group Convex is subject to a deserialization of untrusted data issue that allows PHP Object Injection. This occurs when the application deserializes data from an untrusted source without...

PT-2026-109782

Name of the Vulnerable Software and Affected Versions Dynamic User Directory versions 2.4 and earlier Description An issue involving PHP Object Injection occurs due to the deserialization of untrusted data. Recommendations Update Dynamic User Directory to a version later than 2.4...