CVE-2026-97278

Deserialization of Untrusted Data vulnerability in WP SYNTEX Polylang polylang allows Object Injection.This issue affects Polylang: from n/a through 3.8.9...

CVE-2026-108291

Deserialization of Untrusted Data vulnerability in itthinx Affiliates affiliates allows Object Injection.This issue affects Affiliates: from n/a through 7.0.1...

CVE-2026-106599

Deserialization of Untrusted Data vulnerability in Brainstorm Force SureCart surecart allows Object Injection.This issue affects SureCart: from n/a through 4.9.3...

EUVD-2026-101017

Deserialization of Untrusted Data vulnerability in itthinx Affiliates affiliates allows Object Injection.This issue affects Affiliates: from n/a through 7.0.1...

CVE-2026-108291

The itthinx Affiliates WordPress plugin, versions up to and including 7.0.1 , is vulnerable to a PHP Object Injection flaw caused by the deserialization of untrusted data . This vulnerability allows an attacker to perform Object Injection , which can lead to significant impacts on confidentiality...

CVE-2026-108291 WordPress Affiliates plugin <= 7.0.1 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in itthinx Affiliates affiliates allows Object Injection.This issue affects Affiliates: from n/a through 7.0.1...

EUVD-2026-101010

Deserialization of Untrusted Data vulnerability in Brainstorm Force SureCart surecart allows Object Injection.This issue affects SureCart: from n/a through 4.9.3...

CVE-2026-106599 WordPress SureCart plugin <= 4.9.3 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in Brainstorm Force SureCart surecart allows Object Injection.This issue affects SureCart: from n/a through 4.9.3...

CVE-2026-106599

The SureCart WordPress plugin (versions up to and including 4.9.3 ) is vulnerable to a PHP Object Injection flaw caused by the deserialization of untrusted data . An attacker could potentially exploit this to perform object injection, leading to high confidentiality, integrity, and availability i...

CVE-2026-97278 WordPress Polylang plugin <= 3.8.9 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in WP SYNTEX Polylang polylang allows Object Injection.This issue affects Polylang: from n/a through 3.8.9...

CVE-2026-97278

The WP SYNTEX Polylang plugin (versions up to and including 3.8.9 ) is vulnerable to a PHP Object Injection flaw caused by the deserialization of untrusted data in the polylang component. This vulnerability allows for high-impact consequences regarding confidentiality, integrity, and availability...

CVE-2026-97278 WordPress Polylang plugin <= 3.8.9 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in WP SYNTEX Polylang polylang allows Object Injection.This issue affects Polylang: from n/a through 3.8.9...

EUVD-2026-101009

Deserialization of Untrusted Data vulnerability in WP SYNTEX Polylang polylang allows Object Injection.This issue affects Polylang: from n/a through 3.8.9...

CVE-2026-73793

HPE NonStop Middleware software has secret key handling and data deserialization vulnerability...

CVE-2026-73793 HPE NonStop Middleware - Secret key handling vulnerability

HPE NonStop Middleware software has secret key handling and data deserialization vulnerability...

CVE-2026-73793

The HPE NonStop Middleware software contains a secret key handling and data deserialization vulnerability (CWE-502). Impact includes potential Denial of Service (DoS) , memory corruption , Buffer Overflow , and Stack Overflow on affected systems. The vulnerability affects multiple components, inc...

EUVD-2026-100948

HPE NonStop Middleware software has secret key handling and data deserialization vulnerability...

CVE-2026-73793 HPE NonStop Middleware - Secret key handling vulnerability

HPE NonStop Middleware software has secret key handling and data deserialization vulnerability...

CVE-2026-104764

The Post Export Import with Media plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.17.1 via deserialization of untrusted input . This makes it possible for authenticated attackers, with administrator-level access and above, to inject a PHP Object...

Security Bulletin: IBM ApplinX is vulnerable to multiple vulnerabilities due to use of Apache Log4j, FasterXML jackson-databind, FasterXML jackson-core, and Bouncy Castle libraries

Summary IBM ApplinX is vulnerable to multiple vulnerabilities due to use of third-party libraries: Apache Log4j is vulnerable to an improper encoding or escaping of output vulnerability CVE-2026-49844; FasterXML jackson-databind is vulnerable to multiple uncontrolled resource consumption,...