Lucene search
+L

29578 matches found

Vulnrichment
Vulnrichment
added 2026/02/22 12:02 a.m.5 views

CVE-2026-2898 funadmin Backend Endpoint AuthCloudService.php getMember deserialization

A vulnerability was detected in funadmin up to 7.1.0-rc4. This issue affects the function getMember of the file app/common/service/AuthCloudService.php of the component Backend Endpoint. The manipulation of the argument cloudaccount results in deserialization. The attack may be performed from...

6.5CVSS5.4AI score0.00223EPSS
SaveExploits1References5
OSV
OSV
added 2026/02/22 12:02 a.m.23 views

CVE-2026-2898 funadmin Backend Endpoint AuthCloudService.php getMember deserialization

A vulnerability was detected in funadmin up to 7.1.0-rc4. This issue affects the function getMember of the file app/common/service/AuthCloudService.php of the component Backend Endpoint. The manipulation of the argument cloudaccount results in deserialization. The attack may be performed from...

5.1CVSS5.7AI score
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2026/02/22 12:00 a.m.38 views

PT-2026-21403

A vulnerability was detected in funadmin up to 7.1.0-rc4. This issue affects the function getMember of the file app/common/service/AuthCloudService.php of the component Backend Endpoint. The manipulation of the argument cloud account results in deserialization. The attack may be performed from...

6.5CVSS5.2AI score0.00223EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2026/02/22 12:00 a.m.20 views

FunAdmin 代码问题漏洞

FunAdmin is an open-source backend development system developed using ThinkPHP6 and Layui. Versions of FunAdmin 7.1.0-rc4 and earlier have code vulnerabilities. These vulnerabilities stem from incorrect handling of the cloudaccount parameter in the function getMember within the component’s Backen...

6.5CVSS6.2AI score0.00223EPSS
SaveExploits1References5
RedhatCVE
RedhatCVE
added 2026/02/21 7:31 p.m.17 views

CVE-2025-69294

Deserialization of Untrusted Data vulnerability in fuelthemes PeakShops peakshops allows Object Injection.This issue affects PeakShops: from n/a through = 1.5.9...

8.8CVSS5.5AI score0.00468EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/02/21 7:31 p.m.17 views

CVE-2025-69371

Deserialization of Untrusted Data vulnerability in AncoraThemes KindlyCare kindlycare allows Object Injection.This issue affects KindlyCare: from n/a through = 1.6.1...

9.8CVSS5.5AI score0.00403EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/02/21 7:31 p.m.16 views

CVE-2025-69328

Deserialization of Untrusted Data vulnerability in magepeopleteam Booking and Rental Manager booking-and-rental-manager-for-woocommerce allows Object Injection.This issue affects Booking and Rental Manager: from n/a through = 2.5.9...

8.8CVSS5.5AI score0.00344EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/02/21 7:31 p.m.10 views

CVE-2025-69382

Deserialization of Untrusted Data vulnerability in themesflat Themesflat Elementor themesflat-elementor allows Object Injection.This issue affects Themesflat Elementor: from n/a through = 1.0.1...

9.8CVSS5.5AI score0.00375EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/02/21 7:30 p.m.10 views

CVE-2025-69405

Deserialization of Untrusted Data vulnerability in ThemeREX Lorem Ipsum | Books & Media Store lorem-ipsum-books-media-store allows Object Injection.This issue affects Lorem Ipsum | Books & Media Store: from n/a through = 1.2.11...

9.8CVSS5.9AI score0.00375EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/02/21 7:30 p.m.12 views

CVE-2025-69329

Deserialization of Untrusted Data vulnerability in Jthemes Prestige prestige allows Object Injection.This issue affects Prestige: from n/a through 1.4.1...

9.8CVSS5.5AI score0.00375EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/02/21 7:30 p.m.13 views

CVE-2025-69370

Deserialization of Untrusted Data vulnerability in ThemeGoods Capella capella allows Object Injection.This issue affects Capella: from n/a through = 2.5.5...

9.8CVSS5.5AI score0.00375EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/02/21 7:30 p.m.12 views

CVE-2025-69372

Deserialization of Untrusted Data vulnerability in AncoraThemes SevenHills sevenhills allows Object Injection.This issue affects SevenHills: from n/a through = 1.6.2...

9.8CVSS5.5AI score0.00403EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/02/21 7:30 p.m.13 views

CVE-2025-69404

Deserialization of Untrusted Data vulnerability in ThemeREX Extreme Store extremestore allows Object Injection.This issue affects Extreme Store: from n/a through = 1.5.10...

9.8CVSS5.9AI score0.00375EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/02/21 7:30 p.m.12 views

CVE-2025-69301

Deserialization of Untrusted Data vulnerability in ThemeGoods PhotoMe photome allows Object Injection.This issue affects PhotoMe: from n/a through = 5.6.11...

9.8CVSS5.5AI score0.00375EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/02/21 7:30 p.m.15 views

CVE-2025-67997

Deserialization of Untrusted Data vulnerability in BoldThemes Travelicious travelicious allows Object Injection.This issue affects Travelicious: from n/a through 1.6.7...

9.8CVSS5.5AI score0.00375EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/02/21 7:30 p.m.12 views

CVE-2025-67995

Deserialization of Untrusted Data vulnerability in LoftOcean PatioTime patiotime allows Object Injection.This issue affects PatioTime: from n/a through 2.1...

9.8CVSS5.5AI score0.0051EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/02/21 7:30 p.m.11 views

CVE-2025-67996

Deserialization of Untrusted Data vulnerability in BoldThemes Nestin nestin allows Object Injection.This issue affects Nestin: from n/a through 1.2.6...

9.8CVSS5.5AI score0.00375EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/02/21 7:30 p.m.13 views

CVE-2025-68853

Deserialization of Untrusted Data vulnerability in Kleor Contact Manager contact-manager allows Object Injection.This issue affects Contact Manager: from n/a through = 9.1.1...

8.8CVSS5.5AI score0.0033EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/02/21 7:30 p.m.14 views

CVE-2025-68541

Deserialization of Untrusted Data vulnerability in BoldThemes Ippsum ippsum allows Object Injection.This issue affects Ippsum: from n/a through = 1.2.0...

9.8CVSS5.5AI score0.00375EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/02/21 7:30 p.m.16 views

CVE-2025-68526

Deserialization of Untrusted Data vulnerability in A WP Life Modal Popup Box modal-popup-box allows Object Injection.This issue affects Modal Popup Box: from n/a through = 1.6.1...

8.8CVSS5.5AI score0.00468EPSS
SaveExploits0References1
Rows per page
Query Builder