EUVD-2026-37491

Unauthenticated PHP Object Injection in Esmée = 1.4 versions...

EUVD-2026-37489

Unauthenticated PHP Object Injection in TechLink = 1.3 versions...

EUVD-2026-37480

Unauthenticated PHP Object Injection in Santé = 1.5.1 versions...

EUVD-2026-37473

Unauthenticated PHP Object Injection in Elementra = 1.0.9 versions...

EUVD-2026-37482

Unauthenticated PHP Object Injection in Playroom = 1.4.1 versions...

EUVD-2026-37483

Unauthenticated PHP Object Injection in Valiance = 1.2 versions...

EUVD-2026-37484

Unauthenticated PHP Object Injection in Micdrop = 1.3.1 versions...

EUVD-2026-37478

Unauthenticated PHP Object Injection in Fidalgo = 1.2.2 versions...

EUVD-2026-37479

Unauthenticated PHP Object Injection in NeoBeat = 1.7 versions...

EUVD-2026-37474

Unauthenticated PHP Object Injection in Alloggio - Hotel Booking = 2.1.2 versions...

EUVD-2026-37676

Unauthenticated PHP Object Injection in Mildhill = 1.5 versions...

EUVD-2026-37673

Unauthenticated PHP Object Injection in Zermatt = 1.6.1 versions...

EUVD-2026-37471

Unauthenticated PHP Object Injection in Kapee 1.7.0 versions...

EUVD-2026-37464

Unauthenticated PHP Object Injection in Nifty = 1.4.1 versions...

EUVD-2026-37470

Unauthenticated PHP Object Injection in EmallShop = 2.4.21 versions...

EUVD-2026-37462

Contributor PHP Object Injection in Avada = 3.15.3 versions...

EUVD-2026-37585

The Counter Box – Add Countdowns, Timers & Dynamic Counters to WordPress plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.0.13 via deserialization of untrusted input . This makes it possible for authenticated attackers, with administrator-level...

EUVD-2025-210200

Unauthenticated PHP Object Injection in SeaFood Company = 1.4 versions...

EUVD-2025-210191

Unauthenticated PHP Object Injection in Hot Coffee = 1.7 versions...

EUVD-2025-210223

Unauthenticated PHP Object Injection in ThemeREX Addons = 2.36.1.1 versions...