CVE-2026-56032: Deserialization of Untrusted Data

Subscriber PHP Object Injection in Buddyboss Platform = 3.0.4 versions...

PT-2026-52763

Subscriber PHP Object Injection in RealHomes = 4.5.3 versions...

CVE-2026-56031: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Uncanny Automator = 7.3.1.2 versions...

CVE-2026-56055: Deserialization of Untrusted Data

Subscriber PHP Object Injection in RealHomes = 4.5.3 versions...

PT-2026-52748

Subscriber PHP Object Injection in Buddyboss Platform = 3.0.4 versions...

PT-2026-52764

Subscriber PHP Object Injection in Uncanny Automator Pro = 7.3.0.6 versions...

CVE-2026-56053

Subscriber PHP Object Injection in EventPrime = 4.3.4.1 versions...

EUVD-2026-39382

Subscriber PHP Object Injection in EventPrime = 4.3.4.1 versions...

CVE-2026-56053 WordPress EventPrime plugin <= 4.3.4.1 - PHP Object Injection vulnerability

Subscriber PHP Object Injection in EventPrime = 4.3.4.1 versions...

CVE-2026-56053 WordPress EventPrime plugin <= 4.3.4.1 - PHP Object Injection vulnerability

Subscriber PHP Object Injection in EventPrime = 4.3.4.1 versions...

CVE-2026-56053

Subscriber PHP Object Injection in EventPrime = 4.3.4.1 versions...

CVE-2026-56053

CVE-2026-56053 concerns the WordPress plugin EventPrime (versions

WordPress Uncanny Automator Pro plugin <= 7.3.0.6 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by VanTastic in WordPress Plugin Uncanny Automator Pro versions = 7.3.0.6...

WordPress RealHomes theme <= 4.5.3 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by daroo in WordPress Theme RealHomes versions = 4.5.3...

WordPress EventPrime plugin <= 4.3.4.1 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by VanTastic in WordPress Plugin EventPrime versions = 4.3.4.1...

WordPress Post Duplicator plugin < 3.0.15 - Contributor+ PHP Object Injection via customMetaData vulnerability

Contributor+ PHP Object Injection via customMetaData vulnerability discovered by Md. Minaruzzaman Shovon in WordPress Plugin Post Duplicator versions 3.0.15...

CVE-2026-56053: Deserialization of Untrusted Data

Subscriber PHP Object Injection in EventPrime = 4.3.4.1 versions...

PT-2026-52434

Name of the Vulnerable Software and Affected Versions EventPrime versions prior to 4.3.4.2 Description PHP Object Injection occurs when an application deserializes untrusted data, allowing an attacker to manipulate the object structure and potentially execute arbitrary code or perform unauthorize...

CVE-2026-10749

The Post Duplicator WordPress plugin before 3.0.15 does not safely handle custom meta-data during post duplication, storing attacker-supplied serialized values without the WordPress meta API's double-serialization protection, allowing users with Contributor-level access and above to inject a PHP...

CVE-2026-10749

The Post Duplicator WordPress plugin (versions prior to 3.0.15 ) is vulnerable to PHP Object Injection . The root cause is the unsafe handling of the customMetaData variable during post duplication, where the plugin stores attacker-supplied serialized values without the double-serialization prote...