11416 matches found
CVE-2026-40753
Unauthenticated PHP Object Injection in EasyMeals = 1.5.1 versions...
CVE-2026-40725
Unauthenticated PHP Object Injection in WooCommerce Product Filters 2.0.6 versions...
CVE-2026-40735
Unauthenticated PHP Object Injection in Reina = 2.1 versions...
CVE-2026-40736
Unauthenticated PHP Object Injection in Laurits = 1.5.1 versions...
CVE-2026-39580
Unauthenticated PHP Object Injection in Micdrop = 1.3.1 versions...
CVE-2026-39578
Unauthenticated PHP Object Injection in Valiance = 1.2 versions...
CVE-2026-39567
Unauthenticated PHP Object Injection in Santé = 1.5.1 versions...
CVE-2026-39573
Unauthenticated PHP Object Injection in Mildhill = 1.5 versions...
CVE-2026-39577
Unauthenticated PHP Object Injection in Playroom = 1.4.1 versions...
CVE-2026-39557
Unauthenticated PHP Object Injection in NeoBeat = 1.7 versions...
CVE-2026-39554
Unauthenticated PHP Object Injection in Fidalgo = 1.2.2 versions...
CVE-2026-39539
Unauthenticated PHP Object Injection in Alloggio - Hotel Booking = 2.1.2 versions...
CVE-2026-39545
Unauthenticated PHP Object Injection in Zermatt = 1.6.1 versions...
CVE-2026-39443
Unauthenticated PHP Object Injection in EmallShop = 2.4.21 versions...
CVE-2026-39446
Unauthenticated PHP Object Injection in Kapee 1.7.0 versions...
CVE-2026-39529
Unauthenticated PHP Object Injection in Elementra = 1.0.9 versions...
CVE-2026-27429
Unauthenticated PHP Object Injection in Nifty = 1.4.1 versions...
CVE-2026-12256
Deserialization of Untrusted Data vulnerability in ThemeFusion Fusion Builder fusion-builder allows Object Injection.This issue affects Fusion Builder: from n/a through 3.15.3...
CVE-2026-12115
The Counter Box – Add Countdowns, Timers & Dynamic Counters to WordPress plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.0.13 via deserialization of untrusted input . This makes it possible for authenticated attackers, with administrator-level...