8782 matches found
CVE-2026-73366
The WordPress Easy Google Maps plugin (≤1.13.0) has an unauthenticated PHP Object Injection vulnerability, exploitable remotely without credentials, scoring CVSS 9.8 (Critical). No in-the-wild exploitation or patch details are provided in the documents.
CVE-2026-73341 WordPress RegistrationMagic plugin <= 6.0.9.7 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in RegistrationMagic = 6.0.9.7 versions...
CVE-2026-73341
The WordPress RegistrationMagic plugin (versions
EUVD-2026-60771
Unauthenticated PHP Object Injection in RegistrationMagic = 6.0.9.7 versions...
CVE-2026-73341
Unauthenticated PHP Object Injection in RegistrationMagic = 6.0.9.7 versions...
CVE-2026-66620
Editor PHP Object Injection in OptionTree = 2.7.3 versions...
CVE-2026-66620 WordPress OptionTree plugin <= 2.7.3 - PHP Object Injection vulnerability
Editor PHP Object Injection in OptionTree = 2.7.3 versions...
EUVD-2026-60913
Editor PHP Object Injection in OptionTree = 2.7.3 versions...
CVE-2026-66620
The WordPress OptionTree plugin (≤ 2.7.3) is vulnerable to PHP Object Injection via its Editor component. CVSS 7.2 (HIGH) reflects network attack vector, low complexity, and high impact across confidentiality, integrity, and availability, requiring attacker privileges. Exploitation details are no...
CVE-2026-32470
Unauthenticated PHP Object Injection in FundEngine = 1.7.9 versions...
CVE-2026-32470 WordPress FundEngine plugin <= 1.7.9 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in FundEngine = 1.7.9 versions...
EUVD-2026-60905
Unauthenticated PHP Object Injection in FundEngine = 1.7.9 versions...
CVE-2026-32470
The WordPress FundEngine plugin (versions ≤ 1.7.9) is vulnerable to unauthenticated PHP Object Injection, discovered by researcher daroo. CVSS 3.1 scores this critical (9.8) with network attack vector, no privileges or user interaction required, impacting confidentiality, integrity, and availabil...
CVE-2026-32465
Essential Real Estate is a WordPress plugin affected by a PHP Object Injection vulnerability in versions 5.3.3 and below . The flaw is located in the plugin's customer-facing functionality, allowing an authenticated low-privilege user to inject a malicious PHP object over the network without user...
CVE-2026-32465
Customer PHP Object Injection in Essential Real Estate = 5.3.3 versions...
CVE-2026-32465 WordPress Essential Real Estate plugin <= 5.3.3 - PHP Object Injection vulnerability
Customer PHP Object Injection in Essential Real Estate = 5.3.3 versions...
EUVD-2026-60901
Customer PHP Object Injection in Essential Real Estate = 5.3.3 versions...
PT-2026-77102
Unauthenticated PHP Object Injection in Easy Google Maps = 1.13.0 versions...
PT-2026-77056
Name of the Vulnerable Software and Affected Versions OptionTree versions prior to 2.7.4 Description PHP Object Injection occurs when untrusted data is passed to the unserialize function, allowing an attacker to manipulate serialized objects and potentially execute arbitrary code. Recommendations...