8820 matches found
EUVD-2026-37684
Unauthenticated PHP Object Injection in PressMart = 1.2.26 versions...
CVE-2026-39442 WordPress PressMart theme <= 1.2.26 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in PressMart = 1.2.26 versions...
CVE-2026-39442
CVE-2026-39442 affects WordPress PressMart theme versions up to 1.2.26, where an unauthenticated PHP Object Injection vulnerability exists in the theme’s handling of objects. The underlying issue is PHP object injection, enabling an attacker to manipulate serialized objects and potentially execut...
EUVD-2026-37685
Unauthenticated PHP Object Injection in Alukas 3.0.0 versions...
CVE-2026-39445 WordPress Alukas theme < 3.0.0 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Alukas 3.0.0 versions...
CVE-2026-39445
Affected: WordPress theme Alukas prior to v3.0.0. Vulnerability: PHP Object Injection in versions
CVE-2025-69130
The CVE-2025-69130 entry concerns the WordPress Entrepreneur - Booking for Small Businesses WordPress Theme (versions
CVE-2025-69127 WordPress Plumbing theme <= 1.6 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Plumbing = 1.6 versions...
CVE-2025-69127
CVE-2025-69127 affects the WordPress theme “Plumbing - Plumber and Handyman WordPress Theme” (Plumbing) <= 1.6. Description: Unauthenticated PHP Object Injection in Plumbing <= 1.6. The available document set provides limited public details beyond the vulnerability type and affected version...
CVE-2025-69130 WordPress Entrepreneur - Booking for Small Businesses WordPress Theme theme <= 3.1.3 - PHP Object Injection vulnerability
Subscriber PHP Object Injection in Entrepreneur - Booking for Small Businesses WordPress Theme = 3.1.3 versions...
CVE-2025-69111 WordPress Reisen theme <= 1.4.1 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Reisen = 1.4.1 versions...
CVE-2025-69111
Technical details for CVE-2025-69111 are not provided in the connected documents. Monitor for updates.
Exploit for CVE-2026-49105
CVE-2026-491...
Exploit for CVE-2026-49104
CVE-2026-49104- C...
Exploit for CVE-2026-9691
CVE-2026-9691 CVE-2026-9691: Integra...
Exploit for CVE-2026-49085
CVE-2026-490...
CVE-2026-54806
Affected software: WordPress WP Activity Log plugin (vulnerable <= 5.6.3.1). Issue: unauthenticated PHP Object Injection. Root cause and technical specifics are not detailed in the provided documents beyond the vulnerability type. Impact metrics indicate a high-severity CVSS v3.1 score of 9.8 ...
CVE-2026-54806 WordPress WP Activity Log plugin <= 5.6.3.1 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in WP Activity Log = 5.6.3.1 versions...
CVE-2026-52706
CVE-2026-52706 : Unauthenticated PHP Object Injection in WordPress JetEngine plugin (versions ≤ 3.8.10). Affected component: JetEngine; vulnerability type: PHP Object Injection. Impact: high confidentiality, integrity, and availability (CVSS 3.1 base score 9.8; network attack vector; no user inte...