EUVD-2026-53379

Cotonti CMS's Comments plugin deserializes user-supplied data without restricting the classes that may be instantiated. In plugins/comments/controllers/actions/CreateAction.php, a ci POST parameter obtained via cotimport'ci', 'P', 'TXT' trim-only sanitization is passed to unserializebase64decode$...

CVE-2025-7099

A vulnerability has been found in BoyunCMS up to 1.21 on PHP7 and classified as critical. Affected by this vulnerability is an unknown functionality of the file install/install2.php of the component Installation Handler. The manipulation of the argument dbhost leads to deserialization. The attack...

CVE-2024-13921

CVE-2024-13921 concerns the WordPress plugin “Order Export & Order Import for WooCommerce” (

CVE-2024-13636

...