388789 matches found
PT-2026-109584
Name of the Vulnerable Software and Affected Versions Greeny versions prior to 2.10.1 Description Deserialization of untrusted data in the ThemeREX Group Greeny theme allows for Object Injection. Object Injection occurs when an application deserializes untrusted input, potentially allowing an...
PT-2026-109583
Name of the Vulnerable Software and Affected Versions Hogwords versions prior to 1.2.8 Description Deserialization of untrusted data in the Hogwords theme allows for Object Injection. This occurs when the application deserializes data from an untrusted source without sufficient validation,...
PT-2026-109703
Name of the Vulnerable Software and Affected Versions Super Video Player versions prior to 1.8.14 Description Deserialization of untrusted data in the bPlugins Super Video Player plugin allows for Object Injection. This occurs when the application deserializes data from an untrusted source withou...
PT-2026-109574
Name of the Vulnerable Software and Affected Versions Travesia versions prior to 1.1.17 Description Deserialization of untrusted data in the software allows Object Injection, a technique where an attacker can manipulate serialized objects to execute arbitrary code or interfere with application...
CVE-2026-108579: Improper Neutralization of Formula Elements in a CSV File
OpenPanel through 2.3.0 contains a CSV formula injection vulnerability that allows unauthenticated attackers to embed spreadsheet formulas by supplying crafted profile IDs to the /track endpoint. Attackers can send tracking events with profile IDs like =HYPERLINK... matching a cohort, so exported...
CVE-2026-78531: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in Jacqueline = 2.22 versions...
CVE-2026-14877: Improper Neutralization of Input During Web Page Generation
The Data Tables Generator by Supsystic plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the id attribute in all versions up to, and including, 1.12.03 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...
PT-2026-109859
Name of the Vulnerable Software and Affected Versions Jacqueline versions 2.22 and earlier Description An unauthenticated PHP Object Injection issue exists, which occurs due to the deserialization of untrusted data. This allows an attacker to inject malicious PHP objects into the application...
PT-2026-109582
Name of the Vulnerable Software and Affected Versions Hygia versions prior to 1.21.0 Description Deserialization of untrusted data in the software allows Object Injection, a technique where an attacker can manipulate serialized objects to execute arbitrary code or interfere with application logic...
PT-2026-109585
Name of the Vulnerable Software and Affected Versions Edema versions prior to 1.2.2.3 Description Deserialization of untrusted data in the ThemeREX Group Edema theme allows for Object Injection. Object Injection occurs when untrusted input is passed to a deserialization function, potentially...
PT-2026-109930
Name of the Vulnerable Software and Affected Versions JeecgBoot versions prior to 3.9.6 Description An authorization flaw exists in the embeddingSearch handler of the AiragKnowledgeController due to missing Shiro permission annotations. This allows authenticated users with low privileges to acces...
PT-2026-109849
Name of the Vulnerable Software and Affected Versions Education Center versions prior to 3.6.13 Description An unauthenticated PHP Object Injection issue exists, which occurs due to the deserialization of untrusted data. This allows an attacker to inject malicious PHP objects into the application...
PT-2026-109823
Name of the Vulnerable Software and Affected Versions Juno versions prior to 2.26 Description An unauthenticated PHP Object Injection issue exists, which occurs due to the deserialization of untrusted data. This allows an attacker to inject malicious PHP objects into the application...
PT-2026-109587
Name of the Vulnerable Software and Affected Versions Convex versions prior to 1.16.1 Description ThemeREX Group Convex is subject to a deserialization of untrusted data issue that allows PHP Object Injection. This occurs when the application deserializes data from an untrusted source without...
PT-2026-109782
Name of the Vulnerable Software and Affected Versions Dynamic User Directory versions 2.4 and earlier Description An issue involving PHP Object Injection occurs due to the deserialization of untrusted data. Recommendations Update Dynamic User Directory to a version later than 2.4...
PT-2026-109855
Name of the Vulnerable Software and Affected Versions Original versions prior to 1.9.1 Description An unauthenticated PHP Object Injection issue exists, which occurs due to the deserialization of untrusted data. This allows an attacker to inject malicious PHP objects into the application...
PT-2026-109699
Name of the Vulnerable Software and Affected Versions VillaTheme AFFI – Affiliate Marketing for WooCommerce versions prior to 1.0.11 Description An Object Injection issue exists due to the deserialization of untrusted data. This occurs when the application processes specially crafted serialized...
PT-2026-109821
Name of the Vulnerable Software and Affected Versions Avala versions prior to 1.1.5 Description An unauthenticated PHP Object Injection issue exists, which occurs due to the deserialization of untrusted data. This allows an attacker to inject malicious PHP objects into the application...
PT-2026-109840
Name of the Vulnerable Software and Affected Versions Invetex versions 2.18 and earlier Description An unauthenticated PHP Object Injection issue exists, which occurs due to the deserialization of untrusted data. This allows an attacker to inject malicious PHP objects into the application...
PT-2026-109580
Name of the Vulnerable Software and Affected Versions Let's Play versions prior to 1.1.16 Description Deserialization of untrusted data in the playhockey component allows Object Injection. Object Injection occurs when untrusted data is used to abuse the logic of an application by injecting...