41757 matches found
CVE-2026-100512 WordPress Nested Pages plugin <= 3.3.2 - PHP Object Injection vulnerability
Contributor PHP Object Injection in Nested Pages = 3.3.2 versions...
CVE-2026-97291 WordPress Schema & Structured Data for WP & AMP plugin <= 1.66 - PHP Object Injection vulnerability
Contributor PHP Object Injection in Schema & Structured Data for WP & AMP = 1.66 versions...
CVE-2026-97291 WordPress Schema & Structured Data for WP & AMP plugin <= 1.66 - PHP Object Injection vulnerability
Contributor PHP Object Injection in Schema & Structured Data for WP & AMP = 1.66 versions...
CVE-2026-97291
The Schema & Structured Data for WP & AMP plugin for WordPress, versions
EUVD-2026-90218
Contributor PHP Object Injection in Schema & Structured Data for WP & AMP = 1.66 versions...
CVE-2026-97256 WordPress Page Builder by SiteOrigin plugin <= 2.36.0 - PHP Object Injection vulnerability
Editor PHP Object Injection in Page Builder by SiteOrigin = 2.36.0 versions...
EUVD-2026-90215
Editor PHP Object Injection in Page Builder by SiteOrigin = 2.36.0 versions...
CVE-2026-97256 WordPress Page Builder by SiteOrigin plugin <= 2.36.0 - PHP Object Injection vulnerability
Editor PHP Object Injection in Page Builder by SiteOrigin = 2.36.0 versions...
CVE-2026-97256
The Page Builder by SiteOrigin WordPress plugin, affecting versions
CVE-2026-103442 MergeAccount PHP object injection via session-key substitution
External control of system or configuration setting vulnerability in The Wikimedia Foundation MediaWiki CentralAuth extension allows Code Injection. This issue affects MediaWiki CentralAuth extension: 1.46, 1.45, and 1.43...
EUVD-2026-88392
Axios: Prototype Pollution Gadget in axios toFormData Options...
WordPress EWWW Image Optimizer plugin 8.6.0 - 8.7.7 - Author+ PHP Object Injection vulnerability
WordPress EWWW Image Optimizer plugin 8.6.0 - 8.7.7 - Author+ PHP Object Injection vulnerability discovered by Karthik in WordPress Plugin EWWW Image Optimizer versions 8.6.0-8.7.7...
CVE-2026-88920
A flaw was found in Apache WSS4J. This vulnerability in the Document Object Model DOM security processor allows an unauthenticated remote attacker to bypass authentication and forge authenticated Simple Object Access Protocol SOAP messages. An attacker can exploit this issue by submitting a...
com.mchange/mchange-commons-java: mchange-commons-java: Arbitrary code execution via JNDI dereferencing of crafted objects
A flaw was found in mchange-commons-java, a Java utility library. An attacker can exploit this vulnerability by providing a maliciously crafted javax.naming.Reference or serialized object to an application using the library. This can provoke the application to download and execute arbitrary...
CVE-2026-97246
Subscriber PHP Object Injection in ShortPixel Image Optimizer = 6.5.5 versions...
CVE-2026-97248
Unauthenticated PHP Object Injection in Booking Activities = 1.18.7.1 versions...
CVE-2026-96833
Editor PHP Object Injection in Ultimate Addons for Contact Form 7 = 3.5.51 versions...
CVE-2026-96832
Shop manager PHP Object Injection in Content Egg = 6.3.1 versions...