Lucene search
+L

8280 matches found

Cvelist
Cvelist
added 2026/01/22 4:52 p.m.23 views

CVE-2025-68047 WordPress Eventin plugin <= 4.1.3 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in Arraytics Eventin wp-event-solution allows Object Injection.This issue affects Eventin: from n/a through = 4.1.3...

8.8CVSS0.00468EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/01/22 4:52 p.m.5 views

CVE-2025-68047 WordPress Eventin plugin <= 4.1.3 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in Arraytics Eventin wp-event-solution allows Object Injection.This issue affects Eventin: from n/a through = 4.1.3...

8.8CVSS5.2AI score0.00468EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/01/22 4:52 p.m.7 views

CVE-2025-68047

Deserialization of Untrusted Data vulnerability in Arraytics Eventin wp-event-solution allows Object Injection.This issue affects Eventin: from n/a through = 4.1.1...

8.8CVSS5.3AI score0.00468EPSS
SaveExploits0References2
CVE
CVE
added 2026/01/22 4:51 p.m.16 views

CVE-2025-67619

CVE-2025-67619 describes a PHP object-injection via deserialization in the WordPress Kids Heaven theme (Kids Heaven: kids-world) for versions up to and including 3.2. Root cause: deserialization of untrusted data leading to object injection. Impact: high (per CVSS) across confidentiality, integri...

8.8CVSS5.4AI score0.00503EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/01/22 4:51 p.m.25 views

CVE-2025-67619 WordPress Kids Heaven theme <= 3.2 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in designthemes Kids Heaven kids-world allows Object Injection.This issue affects Kids Heaven: from n/a through = 3.2...

8.8CVSS0.00503EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/01/22 4:51 p.m.3 views

CVE-2025-67619

Deserialization of Untrusted Data vulnerability in designthemes Kids Heaven kids-world allows Object Injection.This issue affects Kids Heaven: from n/a through = 3.2...

8.8CVSS5.3AI score0.00503EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/01/22 4:51 p.m.4 views

CVE-2025-67619 WordPress Kids Heaven theme <= 3.2 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in designthemes Kids Heaven kids-world allows Object Injection.This issue affects Kids Heaven: from n/a through = 3.2...

8.8CVSS5.9AI score0.00503EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/01/22 4:51 p.m.3 views

CVE-2025-67617 WordPress Consult Aid theme <= 1.4.3 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in themeton Consult Aid consultaid allows Object Injection.This issue affects Consult Aid: from n/a through = 1.4.3...

9.8CVSS5.9AI score0.00547EPSS
SaveExploits0References1
CVE
CVE
added 2026/01/22 4:51 p.m.17 views

CVE-2025-67617

CVE-2025-67617 is a deserialization of untrusted data vulnerability in the themeton Consult Aid WordPress theme (affected versions up to 1.4.3). The underlying issue is PHP Object Injection via untrusted data deserialization, exposed for the Consult Aid: Business Consulting and Finance PSD produc...

9.8CVSS5.4AI score0.00547EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/01/22 4:51 p.m.4 views

CVE-2025-67617

Deserialization of Untrusted Data vulnerability in themeton Consult Aid consultaid allows Object Injection.This issue affects Consult Aid: from n/a through = 1.4.3...

9.8CVSS5.3AI score0.00547EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/01/22 4:51 p.m.22 views

CVE-2025-67617 WordPress Consult Aid theme <= 1.4.3 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in themeton Consult Aid consultaid allows Object Injection.This issue affects Consult Aid: from n/a through = 1.4.3...

9.8CVSS0.00547EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/01/22 4:51 p.m.29 views

CVE-2025-50004 WordPress JupiterX Core plugin <= 4.10.1 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in artbees JupiterX Core jupiterx-core allows Object Injection.This issue affects JupiterX Core: from n/a through = 4.10.1...

8.8CVSS0.00559EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/01/22 4:51 p.m.6 views

CVE-2025-50004

Deserialization of Untrusted Data vulnerability in artbees JupiterX Core jupiterx-core allows Object Injection.This issue affects JupiterX Core: from n/a through = 4.10.1...

8.5CVSS5.3AI score0.00559EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/01/22 4:51 p.m.5 views

CVE-2025-50004 WordPress JupiterX Core plugin <= 4.10.1 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in artbees JupiterX Core jupiterx-core allows Object Injection.This issue affects JupiterX Core: from n/a through = 4.10.1...

8.8CVSS5.9AI score0.00559EPSS
SaveExploits0References1
CVE
CVE
added 2026/01/22 4:51 p.m.16 views

CVE-2025-50004

CVE-2025-50004 describes a deserialization of untrusted data vulnerability in the WordPress plugin JupiterX Core (jupiterx-core), enabling PHP Object Injection. Affected versions are JupiterX Core

8.8CVSS5.4AI score0.00559EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2026/01/22 11:24 a.m.11 views

WordPress Eventin plugin <= 4.1.3 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by w41bu1 in WordPress Plugin Eventin versions = 4.1.3...

8.8CVSS5.5AI score0.00468EPSS
SaveExploits0Affected Software1
CNNVD
CNNVD
added 2026/01/22 12:0 a.m.12 views

WordPress plugin Anona: code-related vulnerabilities

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There we...

8.8CVSS5.9AI score0.0037EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/01/22 12:0 a.m.13 views

PT-2026-4016

Name of the Vulnerable Software and Affected Versions themeton Consult Aid versions through 1.4.3 Description A flaw exists in themeton Consult Aid that allows for object injection due to deserialization of untrusted data. This condition can be exploited by attackers to potentially compromise the...

5.5AI score0.00547EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/01/22 12:0 a.m.9 views

PT-2026-4119

Name of the Vulnerable Software and Affected Versions designthemes OneLife versions n/a through 3.9 Description A flaw exists in designthemes OneLife that allows for Object Injection due to deserialization of untrusted data. This issue impacts the application’s ability to securely handle incoming...

5.5AI score0.00344EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/01/22 12:0 a.m.18 views

PT-2026-4169

Deserialization of Untrusted Data vulnerability in fuelthemes North north-wp allows Object Injection.This issue affects North: from n/a through = 5.7.5...

5.4AI score0.0037EPSS
SaveExploits0References2
Rows per page
Query Builder