8794 matches found
CVE-2026-66672
Unauthenticated PHP Object Injection in Flatastic = 2.0 versions...
CVE-2026-66583
Unauthenticated PHP Object Injection in Forminator = 1.57.0 versions...
CVE-2026-73993
The WordPress FundEngine plugin (versions
CVE-2026-73993 WordPress FundEngine plugin <= 1.7.9 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in FundEngine = 1.7.9 versions...
EUVD-2026-63312
Unauthenticated PHP Object Injection in FundEngine = 1.7.9 versions...
CVE-2026-66672 WordPress Flatastic theme <= 2.0 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Flatastic = 2.0 versions...
EUVD-2026-63303
Unauthenticated PHP Object Injection in Flatastic = 2.0 versions...
CVE-2026-66672
The WordPress Flatastic theme (versions ≤ 2.0) is vulnerable to unauthenticated PHP Object Injection, exploitable over the network without credentials. The Patchstack advisory documents the issue; no exploit code or in-the-wild activity is reported. Affected sites should update to a patched theme...
CVE-2026-66583
CVE-2026-66583 is an unauthenticated PHP Object Injection vulnerability in the WordPress Forminator plugin , affecting versions
EUVD-2026-63332
Unauthenticated PHP Object Injection in Forminator = 1.57.0 versions...
CVE-2026-66583 WordPress Forminator plugin <= 1.57.0 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Forminator = 1.57.0 versions...
WordPress FreightCo theme <= 1.1.15 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by daroo in WordPress Theme FreightCo versions = 1.1.15...
WordPress Clearfy plugin < 2.4.3 - Admin+ PHP Object Injection via Settings Import vulnerability
Admin+ PHP Object Injection via Settings Import vulnerability discovered by Omar Elshopky in WordPress Plugin Clearfy Cache versions 2.4.3...
PT-2026-78976
Name of the Vulnerable Software and Affected Versions Flatastic versions prior to 2.1 Description An unauthenticated PHP Object Injection issue exists. PHP Object Injection occurs when untrusted input is passed to the unserialize function, allowing an attacker to manipulate serialized objects and...
Security Bulletin: IBM Terracotta is affected by Logback vulnerabilities that could allow deserialization of untrusted data resulting in object injection
Summary IBM Terracotta uses Logback for logging purposes within the product. Vulnerability Details CVEID:CVE-2026-10532 DESCRIPTION: Deserialization of untrusted data vulnerability in QOS.CH Sarl logback logback-core HardenedObjectInputStream logback-core modules allows Object Injection, albeit...
CVE-2026-73389
Unauthenticated PHP Object Injection in Kalles Addons = 1.0.6 versions...
CVE-2026-73364
Customer PHP Object Injection in Flexible Subscriptions = 1.8.1 versions...
CVE-2026-73389 WordPress Kalles Addons plugin <= 1.0.6 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Kalles Addons = 1.0.6 versions...
CVE-2026-73389
CVE-2026-73389 is an unauthenticated PHP Object Injection vulnerability in the Kalles Addons WordPress plugin, affecting versions 1.0.6 and earlier . The flaw allows a remote, unauthenticated attacker to achieve full compromise of confidentiality, integrity, and availability, reflected in a CVSS ...