CVE-2026-39557: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in NeoBeat = 1.7 versions...

CVE-2026-12115: Deserialization of Untrusted Data

The Counter Box – Add Countdowns, Timers & Dynamic Counters to WordPress plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.0.13 via deserialization of untrusted input . This makes it possible for authenticated attackers, with administrator-level...

CVE-2025-69127: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Plumbing = 1.6 versions...

CVE-2025-69111: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Reisen = 1.4.1 versions...

CVE-2026-54194: Deserialization of Untrusted Data

Contributor PHP Object Injection in Fusion Builder = 3.15.4 versions...

CVE-2026-40760: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Behold = 1.5 versions...

CVE-2026-40758: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Léonie = 1.2.1 versions...

CVE-2026-40755: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in TechLink = 1.3 versions...

CVE-2026-40753: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in EasyMeals = 1.5.1 versions...

CVE-2026-40751: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Ashtanga = 1.2 versions...

CVE-2026-39545: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Zermatt = 1.6.1 versions...

CVE-2026-39539: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Alloggio - Hotel Booking = 2.1.2 versions...

CVE-2026-39529: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Elementra = 1.0.9 versions...

CVE-2026-39446: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Kapee 1.7.0 versions...

CVE-2026-39443: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in EmallShop = 2.4.21 versions...

CVE-2026-52706: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in JetEngine = 3.8.10 versions...

CVE-2026-42380: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in AI Lab 5.4.2 versions...

CVE-2025-69130: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in Pixel Makers Creative INC. Entrepreneur - Booking for Small Businesses WordPress Theme allows Object Injection. This issue affects Entrepreneur - Booking for Small Businesses WordPress Theme: from n/a before 3.1.5...

CVE-2025-60236: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in EMV Creatify allows Object Injection. This issue affects Creatify: from n/a through 1.5...

CVE-2025-60231: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in EMV The Hospital nrghospital allows Object Injection. This issue affects The Hospital: from n/a through 1.8.1...