CVE-2026-73993

The WordPress FundEngine plugin (versions

CVE-2026-73993: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in FundEngine = 1.7.9 versions...

PT-2026-78985

Unauthenticated PHP Object Injection in FundEngine = 1.7.9 versions...

WordPress FundEngine plugin <= 1.7.9 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Taylsec in WordPress Plugin FundEngine versions = 1.7.9...

CVE-2026-32470

Unauthenticated PHP Object Injection in FundEngine = 1.7.9 versions...

CVE-2026-32470

Unauthenticated PHP Object Injection in FundEngine = 1.7.9 versions...

CVE-2026-32470 WordPress FundEngine plugin <= 1.7.9 - PHP Object Injection vulnerability

Unauthenticated PHP Object Injection in FundEngine = 1.7.9 versions...

EUVD-2026-60905

Unauthenticated PHP Object Injection in FundEngine = 1.7.9 versions...

CVE-2026-32470 WordPress FundEngine plugin <= 1.7.9 - PHP Object Injection vulnerability

Unauthenticated PHP Object Injection in FundEngine = 1.7.9 versions...

CVE-2026-32470

The WordPress FundEngine plugin (versions ≤ 1.7.9) is vulnerable to unauthenticated PHP Object Injection, discovered by researcher daroo. CVSS 3.1 scores this critical (9.8) with network attack vector, no privileges or user interaction required, impacting confidentiality, integrity, and availabil...

CVE-2026-32470: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in FundEngine = 1.7.9 versions...

PT-2026-77047

Unauthenticated PHP Object Injection in FundEngine = 1.7.9 versions...

WordPress FundEngine plugin <= 1.7.9 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by daroo in WordPress Plugin FundEngine versions = 1.7.9...

CVE-2026-59560

Subscriber Broken Access Control in FundEngine = 1.7.8 versions...

CVE-2026-59560 WordPress FundEngine plugin <= 1.7.8 - Broken Access Control vulnerability

Subscriber Broken Access Control in FundEngine = 1.7.8 versions...

CVE-2026-59560 WordPress FundEngine plugin <= 1.7.8 - Broken Access Control vulnerability

Subscriber Broken Access Control in FundEngine = 1.7.8 versions...

CVE-2026-59560

The CVE-2026-59560 pertains to the WordPress FundEngine plugin (affected: FundEngine

CVE-2026-59560

Subscriber Broken Access Control in FundEngine = 1.7.8 versions...

EUVD-2026-49227

Subscriber Broken Access Control in FundEngine = 1.7.8 versions...

WordPress FundEngine plugin <= 1.7.8 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Septio Noerdiansyah in WordPress Plugin FundEngine versions = 1.7.8...