Lucene search
+L

11237 matches found

Patchstack
Patchstack
•added 2026/08/06 12:51 p.m.•13 views

WordPress AI ANN theme <= 1.29.0 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme AI ANN versions = 1.29.0...

9.8CVSS5.8AI score0.00564EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2026/08/06 12:50 p.m.•20 views

WordPress Agricola theme <= 1.21.0 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Bonds in WordPress Theme Agricola versions = 1.21.0...

9.8CVSS5.8AI score0.00564EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2026/08/06 12:49 p.m.•15 views

WordPress Agora theme <= 1.9 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Bonds in WordPress Theme Agora versions = 1.9...

9.8CVSS5.8AI score0.00564EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2026/08/06 12:49 p.m.•17 views

WordPress Advice theme <= 1.18.0 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Bonds in WordPress Theme Advice versions = 1.18.0...

9.8CVSS5.8AI score0.00564EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2026/08/06 12:49 p.m.•12 views

WordPress Adrena theme <= 1.2.14 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Bonds in WordPress Theme Adrena versions = 1.2.14...

9.8CVSS5.8AI score0.00564EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2026/08/06 12:48 p.m.•15 views

WordPress Accalia theme <= 1.5.3 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme Accalia versions = 1.5.3...

9.8CVSS5.8AI score0.00564EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2026/08/06 12:48 p.m.•16 views

WordPress Abogado theme <= 1.18 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Bonds in WordPress Theme Abogado versions = 1.18...

9.8CVSS5.8AI score0.00564EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2026/08/06 12:48 p.m.•15 views

WordPress Abelle theme <= 1.22 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by johska in WordPress Theme Abelle versions = 1.22...

9.8CVSS5.8AI score0.00564EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2026/08/06 12:41 p.m.•20 views

WordPress A.Williams theme <= 1.3.1 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Bonds in WordPress Theme A.Williams versions = 1.3.1...

9.8CVSS5.8AI score0.00564EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2026/08/06 12:41 p.m.•15 views

WordPress 69 Clothing theme <= 1.2.11.1 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Bonds in WordPress Theme 69 Clothing versions = 1.2.11.1...

9.8CVSS5.8AI score0.00564EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2026/08/06 8:17 a.m.•17 views

WordPress ChamaWP plugin < 1.0.13 - Unauthenticated PHP Object Injection vulnerability

Unauthenticated PHP Object Injection vulnerability discovered by Khaled Alenazi Nxploited in WordPress Plugin ChamaWP versions 1.0.13...

8.1CVSS5.5AI score0.00646EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2026/08/06 12:00 a.m.•7 views

PT-2026-68563

Name of the Vulnerable Software and Affected Versions Abogado versions prior to 1.19 Description This issue involves PHP Object Injection caused by the deserialization of untrusted input. This allows unauthenticated attackers to inject a PHP Object. While no POP chain a sequence of gadgets used t...

9.8CVSS6.1AI score0.00564EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/08/06 12:00 a.m.•6 views

PT-2026-68560

Name of the Vulnerable Software and Affected Versions 69 Clothing versions prior to 1.2.11.2 Description The 69 Clothing | Brand Store & Fashion Boutique WordPress Theme is susceptible to PHP Object Injection, a condition where an application deserializes untrusted input, allowing an attacker to...

9.8CVSS6.3AI score0.00564EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/06 12:00 a.m.•5 views

CVE-2026-65575: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Accalia = 1.5.3 versions...

9.8CVSS5.8AI score0.00564EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/06 12:00 a.m.•5 views

CVE-2026-65573: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Abelle = 1.22 versions...

9.8CVSS5.8AI score0.00564EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/06 12:00 a.m.•4 views

CVE-2026-65549: Deserialization of Untrusted Data

Author PHP Object Injection in Jeg Kit for Elementor = 3.2.10 versions...

7.2CVSS5.8AI score0.00539EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/06 12:00 a.m.•10 views

CVE-2026-65579: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Agricola = 1.21.0 versions...

9.8CVSS5.8AI score0.00564EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/06 12:00 a.m.•5 views

CVE-2026-65581: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in AI ANN = 1.29.0 versions...

9.8CVSS5.8AI score0.00564EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/06 12:00 a.m.•2 views

CVE-2026-65578: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Agora = 1.9 versions...

9.8CVSS5.8AI score0.00564EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/06 12:00 a.m.•8 views

CVE-2026-65577: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Advice = 1.18.0 versions...

9.8CVSS5.8AI score0.00564EPSS
SaveExploits0References2
Rows per page
Query Builder