CVE-2025-69108

CVE-2025-69108 is an unauthenticated PHP Object Injection in the WordPress theme Hot Coffee (<= 1.7). The description specifies unauthenticated object injection in Hot Coffee

CVE-2026-54194 WordPress Fusion Builder plugin <= 3.15.4 - PHP Object Injection vulnerability

Contributor PHP Object Injection in Fusion Builder = 3.15.4 versions...

CVE-2026-54194

CVE-2026-54194 concerns the WordPress Fusion Builder plugin, affected versions ≤ 3.15.4, with a PHP Object Injection vulnerability identified in the CVE record. The provided information confirms the affected component (Fusion Builder), the vulnerable version range, and the nature of the issue (PH...

WordPress WP Activity Log plugin <= 5.6.3.1 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by daroo in WordPress Plugin WP Activity Log versions = 5.6.3.1...

PT-2026-50088

Name of the Vulnerable Software and Affected Versions Nifty versions 1.4.1 and earlier Description Unauthenticated PHP Object Injection allows an attacker to inject malicious objects into the application. PHP Object Injection occurs when user-supplied input is passed to the unserialize function...

PT-2026-50094

Unauthenticated PHP Object Injection in EmallShop = 2.4.21 versions...

PT-2026-50098

Unauthenticated PHP Object Injection in Alloggio - Hotel Booking = 2.1.2 versions...

PT-2026-50097

Unauthenticated PHP Object Injection in Elementra = 1.0.9 versions...

PT-2026-50106

Unauthenticated PHP Object Injection in Playroom = 1.4.1 versions...

PT-2026-50112

Unauthenticated PHP Object Injection in Ashtanga = 1.2 versions...

PT-2026-50113

Unauthenticated PHP Object Injection in Roisin = 1.4 versions...

PT-2026-50117

Unauthenticated PHP Object Injection in Behold = 1.5 versions...

PT-2026-50095

Unauthenticated PHP Object Injection in Kapee 1.7.0 versions...

PT-2026-50108

Unauthenticated PHP Object Injection in Micdrop = 1.3.1 versions...

PT-2026-50085

Contributor PHP Object Injection in Avada = 3.15.3 versions...

PT-2026-50102

Unauthenticated PHP Object Injection in Fidalgo = 1.2.2 versions...

PT-2026-50115

Unauthenticated PHP Object Injection in Léonie = 1.2.1 versions...

PT-2026-50081

Unauthenticated PHP Object Injection in SeaFood Company = 1.4 versions...

PT-2026-50110

Unauthenticated PHP Object Injection in Laurits = 1.5.1 versions...

PT-2026-50107

Unauthenticated PHP Object Injection in Valiance = 1.2 versions...