8780 matches found
CVE-2026-52777 YesWiki: Authenticated PHP Object Injection in BazarImportAction via unserialize
YesWiki is a wiki system written in PHP. Prior to version 4.6.6, there is an authenticated PHP object injection vulnerability in BazarImportAction via unserialize. This issue has been patched in version 4.6.6...
CVE-2026-52777 YesWiki: Authenticated PHP Object Injection in BazarImportAction via unserialize
YesWiki is a wiki system written in PHP. Prior to version 4.6.6, there is an authenticated PHP object injection vulnerability in BazarImportAction via unserialize. This issue has been patched in version 4.6.6...
CVE-2026-7654
CVE-2026-7654 CVE-2026-7654 Admin Columns PHP Object Injection RCE Exploit...
CVE-2026-49085
CVE-2026-49085 CVE-2026-49085 WP Insightly PHP Object Injection Exploit...
WordPress Welcart e-Commerce plugin <= 2.12.1 - Unauthenticated Arbitrary File Deletion via PHP Object Injection via 'reserve' Checkout Parameter and 'option' EDY Callback vulnerability
Unauthenticated Arbitrary File Deletion via PHP Object Injection via 'reserve' Checkout Parameter and 'option' EDY Callback vulnerability discovered by daroo in WordPress Plugin Welcart e-Commerce versions = 2.12.1...
CVE-2024-12877
CVE-2024-12877 GiveWP – Donation Plugin and Fundraising Platform = 3.19.2 - Unauthenticated PHP Object Injection Description The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.19.2 via...
CVE-2026-84834
Unauthenticated PHP Object Injection in JobSearch = 3.2.0 versions...
CVE-2026-84752
Contributor PHP Object Injection in RTMKit = 2.1.5 versions...
CVE-2026-84753
Unauthenticated PHP Object Injection in Mail Mint = 1.31.0 versions...
EUVD-2026-70565
Unauthenticated PHP Object Injection in JobSearch = 3.2.0 versions...
CVE-2026-84834
CVE-2026-84834 affects the WordPress JobSearch plugin in versions ≤ 3.2.0 . The vulnerability is an unauthenticated PHP Object Injection , allowing a remote attacker with no privileges to potentially achieve high impact on confidentiality, integrity, and availability, as reflected by a CVSS 3.1 s...
CVE-2026-84834 WordPress JobSearch plugin <= 3.2.0 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in JobSearch = 3.2.0 versions...
CVE-2026-84753 WordPress Mail Mint plugin <= 1.31.0 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Mail Mint = 1.31.0 versions...
CVE-2026-84753
CVE-2026-84753 affects the WordPress Mail Mint plugin in versions 1.31.0 and below , where an unauthenticated PHP Object Injection flaw allows a remote attacker to inject arbitrary serialized objects into the application. The vulnerability is rated CVSS 9.8 (CRITICAL) with high impact to confiden...
EUVD-2026-70589
Unauthenticated PHP Object Injection in Mail Mint = 1.31.0 versions...
CVE-2026-84752 WordPress RTMKit plugin <= 2.1.5 - PHP Object Injection vulnerability
Contributor PHP Object Injection in RTMKit = 2.1.5 versions...
CVE-2026-84752
CVE-2026-84752 affects the WordPress RTMKit plugin (Rometheme for Elementor) in versions 2.1.5 and earlier . The vulnerability is a PHP Object Injection that can be exploited by a user with Contributor privileges, resulting in high impact on confidentiality, integrity, and availability (CVSS 8.8 ...
EUVD-2026-70590
Contributor PHP Object Injection in RTMKit = 2.1.5 versions...
CVE-2026-85170
n8n versions before 1.123.73, 2.35.4, and 2.36.2 pass message content in the Gmail v1 and Brevo nodes to the mail composer without verifying it is a string. An authenticated user able to run a workflow can supply an expression that resolves to an object carrying a path or href property, causing t...