WordPress Gravity Forms plugin <= 3.1.2 - Unauthenticated PHP Object Injection vulnerability

Unauthenticated PHP Object Injection vulnerability discovered by Tin Pham TF1T, Hao Ngo, Trong Pham in WordPress Plugin Gravity Forms versions = 3.1.2...

CVE-2026-54806

WP Activity Log PHP Object Injection CVE-2026-54806 PoC 📜 Description CVE-2026-54806 is a critical CVSS 9.8 unauthenticated PHP Object Injection vulnerability in the WP Activity Log WordPress plugin wp-security-audit-log by Melapress. An unauthenticated attacker can inject serialized PHP objects...

CVE-2026-49085

CVE-2026-49085 CVE-2026-49085 WP Insightly PHP Object Injection Exploit...

CVE-2018-20718

CVE-2018-20718 This is a POC for CVE-2018-20718. It is a PHP Object injection vulnerability. The vulnerability affect all version of Pydio before 8.2.1 and leads to Unauthenticated Remote Code Execution. It was originaly found by RIPS. I found a gadget in Pydio\Core\Controller\ShutdownScheduler...

CVE-2026-46275

CVE-2026-46725 — TYPO3 ceselector Extension RCE PHP Object Injection viaunserialize Cookie Bypass → Remote Code Execution 📋 Table of Contents About the Vulnerability Technical Details Requirements Installation Usage Examples Output Format How It Works References Legal Disclaimer 🔍 About the...

CVE-2026-62018

Unauthenticated PHP Object Injection in Gunslinger = 1.11 versions...

CVE-2026-62013

Unauthenticated PHP Object Injection in Edge Decor = 2.9 versions...

CVE-2026-62017

Unauthenticated PHP Object Injection in Good Homes = 1.3.13 versions...

CVE-2026-62006

Unauthenticated PHP Object Injection in Nuts = 1.12 versions...

CVE-2026-62008

Unauthenticated PHP Object Injection in Orpheus = 1.8 versions...

CVE-2026-62012

Unauthenticated PHP Object Injection in Coinpress = 1.0.15 versions...

CVE-2026-62001

Unauthenticated PHP Object Injection in Marcell = 1.2.14 versions...

CVE-2026-62002

Unauthenticated PHP Object Injection in Meals & Wheels = 1.1.13 versions...

CVE-2026-54859

Unauthenticated PHP Object Injection in Preservation = 1.15 versions...

CVE-2026-54858

Unauthenticated PHP Object Injection in Printy = 1.13.0 versions...

CVE-2026-118081

Contributor PHP Object Injection in 10Web Social Photo Feed = 1.5.6 versions...

CVE-2026-118076

Contributor PHP Object Injection in Frisbii Pay = 1.8.19 versions...

CVE-2026-118080

Contributor PHP Object Injection in Social Snap = 1.5.4 versions...

CVE-2026-118075

Contributor PHP Object Injection in WP Media folders = 1.1.10 versions...

CVE-2026-116868

Subscriber PHP Object Injection in BuddyPress Xprofile Custom Field Types = 1.3.1 versions...