PT-2025-9474

Name of the Vulnerable Software and Affected Versions Brent Jett Assistant versions 1.5.1 and earlier Description The issue is related to Deserialization of Untrusted Data, which allows Object Injection. Recommendations For versions 1.5.1 and earlier, update to a version that contains a fix for...

WordPress Plugin Assistant code vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A code issue vulnerability exists in...

NI DAQExpress LVPROJECT File Parsing Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of NI DAQExpress. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

WordPress Plugin ProfileGrid code issue vulnerabilities

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability...

WordPress Plugin Album Gallery Code Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability exists i...

CVE-2024-13831

CVE-2024-13831 concerns Tabs for WooCommerce (WordPress)

CVE-2024-13831 Tabs for WooCommerce <= 1.0.0 - Authentiated (Shop Manager+) PHP Object Injection in product_has_custom_tabs

The Tabs for WooCommerce plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.0.0 via deserialization of untrusted input in the 'producthascustomtabs' function. This makes it possible for authenticated attackers, with Shop Manager-level access and...

WordPress plugin PixelYourSite has code-related vulnerabilities

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability...

WordPress plugin Tabs for WooCommerce: Code issues and vulnerabilities

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A code issue vulnerability...

IBM Cognos Controller Deserialization Privilege Escalation

The vulnerabilities of the software solutions that support the closing, consolidation, and reporting processes of IBM Cognos Controller and IBM Controller are related to deficiencies in the deserialization mechanism. Exploiting these vulnerabilities can allow attackers to enhance their privileges...

CVE-2025-1741 b1gMail Admin Page users.php deserialization

A vulnerability classified as problematic was found in b1gMail up to 7.4.1-pl1. Affected by this vulnerability is an unknown functionality of the file src/admin/users.php of the component Admin Page. The manipulation of the argument query/q leads to deserialization. The attack can be launched...

WordPress plugin WP Activity Log: Code-related vulnerabilities

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability exists i...

b1gMail code-related vulnerabilities

b1gMail is an email service from b1gMail open source. A code issue vulnerability exists in b1gMail 7.4.1-pl1 and earlier versions that stems from deserialization...

CVE-2025-27301

Deserialization of Untrusted Data vulnerability in Nazmul Hasan Robin NHR Options Table Manager nhrrob-options-table-manager allows Object Injection.This issue affects NHR Options Table Manager: from n/a through = 1.1.2...

CVE-2025-26900

CVE-2025-26900: Deserialization of untrusted data in Flexmls IDX Plugin for WordPress (

CVE-2025-26900 WordPress Flexmls® IDX Plugin Plugin <= 3.14.27 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in flexmls Flexmls® IDX flexmls-idx allows Object Injection.This issue affects Flexmls® IDX: from n/a through = 3.14.27...

WordPress plugin Flexmls: IDX code issue vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability...

WordPress NHR Options Table Manager Plugin <= 1.1.2 - Deserialization of untrusted data vulnerability

Deserialization of untrusted data vulnerability discovered by Phan Trong Quan - VNPT Cyber Immunity in WordPress Plugin NHR Options Table Manager versions = 1.1.2...

WordPress ADFO plugin <= 1.9.1 - Deserialization of untrusted data vulnerability

Deserialization of untrusted data vulnerability discovered by Phan Trong Quan - VNPT Cyber Immunity in WordPress Plugin ADFO versions = 1.9.1...

CVE-2025-27301

CVE-2025-27301 describes a deserialization of untrusted data vulnerability in the WordPress plugin NHR Options Table Manager (affected: versions up to 1.1.2). According to the connected sources, the flaw enables an object injection scenario via deserialization of untrusted data, with CVSS v3.1 me...