5789 matches found
WordPress plugin KindlyCare 代码问题漏洞
WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. The...
PT-2026-21153
Name of the Vulnerable Software and Affected Versions AncoraThemes SevenHills versions through 1.6.2 Description The software contains a flaw due to deserialization of untrusted data, which allows for object injection. Recommendations Update AncoraThemes SevenHills to a version newer than 1.6.2...
PT-2026-21065
Name of the Vulnerable Software and Affected Versions BoldThemes Travelicious versions prior to 1.6.7 Description The software contains a flaw due to deserialization of untrusted data, which allows for object injection. This could potentially allow an attacker to manipulate serialized data and...
PT-2026-21152
Name of the Vulnerable Software and Affected Versions AncoraThemes KindlyCare versions through 1.6.1 Description An issue exists in AncoraThemes KindlyCare that allows for Object Injection due to deserialization of untrusted data. Recommendations Update KindlyCare to a version later than 1.6.1...
PT-2026-21197
Name of the Vulnerable Software and Affected Versions A WP Life Slider Responsive Slideshow – Image slider, Gallery slideshow versions through 1.5.4 Description The software contains a flaw related to the deserialization of untrusted data, which allows for object injection. This issue impacts...
PT-2026-21201
Name of the Vulnerable Software and Affected Versions Dotstore Woocommerce Category Banner Management versions through 2.5.1 Description The software contains a flaw due to deserialization of untrusted data, which allows for object injection. This issue is present in the Woocommerce Category Bann...
openITCOCKPIT 代码问题漏洞
openITCOCKPIT is an open-source system monitoring software. Versions of openITCOCKPIT 5.3.1 and earlier have code vulnerabilities. These vulnerabilities stem from insecure deserialization points in the Gearman worker implementation, which may lead to PHP object injection attacks...
PT-2026-21196
Name of the Vulnerable Software and Affected Versions A WP Life Image Gallery – Lightbox Gallery, Responsive Photo Gallery, Masonry Gallery versions through 1.6.0 Description The software contains a flaw related to the deserialization of untrusted data, specifically allowing for object injection...
PT-2026-21144
Name of the Vulnerable Software and Affected Versions Jthemes Prestige versions prior to 1.4.1 Description The software contains a flaw due to deserialization of untrusted data, which can lead to object injection. Recommendations Update Jthemes Prestige to version 1.4.1 or later...
PT-2026-21112
Name of the Vulnerable Software and Affected Versions Kleor Contact Manager versions through 9.1.1 Description A flaw exists in Kleor Contact Manager that allows for object injection due to deserialization of untrusted data. This issue impacts the contact-manager component. Recommendations At the...
openITCOCKPIT 代码问题漏洞
openITCOCKPIT is an open-source system monitoring software. Versions of openITCOCKPIT 5.3.1 and earlier have code vulnerabilities. These vulnerabilities stem from unsafe PHP deserialization patterns when processing change log entries, which may lead to potential PHP object injection vulnerabiliti...
WordPress plugin Booking and Rental Manager 代码问题漏洞
WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There is...
CVE-2025-15579
Deserialization of Untrusted Data vulnerability in OpenText™ Directory Services allows Object Injection. The vulnerability could lead to remote code execution, denial of service, or privilege escalation. This issue affects Directory Services: before 24.4.16, from 25.1 before 25.1.9, from 25.2...
CVE-2026-25316
Deserialization of Untrusted Data vulnerability in Brainstorm Force CartFlows cartflows allows Object Injection.This issue affects CartFlows: from n/a through = 2.1.19...
CVE-2026-23544
Deserialization of Untrusted Data vulnerability in codetipi Valenti valenti allows Object Injection.This issue affects Valenti: from n/a through = 5.6.3.5...
CVE-2026-23549
Deserialization of Untrusted Data vulnerability in magepeopleteam WpEvently mage-eventpress allows Object Injection.This issue affects WpEvently: from n/a through = 5.1.1...
CVE-2026-23542
Deserialization of Untrusted Data vulnerability in ThemeGoods Grand Restaurant grandrestaurant allows Object Injection.This issue affects Grand Restaurant: from n/a through = 7.0.10...
CVE-2026-22333
Deserialization of Untrusted Data vulnerability in YITHEMES YITH WooCommerce Compare yith-woocommerce-compare allows Object Injection.This issue affects YITH WooCommerce Compare: from n/a through = 3.6.0...
