44274 matches found
WordPress Popup by Supsystic plugin <= 1.13.0 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by Asim Alshaya in WordPress Plugin Popup by Supsystic versions = 1.13.0...
WordPress Ultimate Maps by Supsystic plugin < 1.5.0 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by Asim Alshaya in WordPress Plugin Ultimate Maps by Supsystic versions 1.5.0...
WordPress Modal Survey plugin <= 2.0.2.2.3 - Insecure Direct Object References (IDOR) vulnerability
Insecure Direct Object References IDOR vulnerability discovered by luc in WordPress Plugin Modal Survey versions = 2.0.2.2.3...
WordPress Podlove Podcast Publisher plugin <= 4.5.3 - Authenticated (Contributor+) PHP Object Injection to Arbitrary File Deletion via 'unfurl_data' Parameter vulnerability
Authenticated Contributor+ PHP Object Injection to Arbitrary File Deletion via 'unfurldata' Parameter vulnerability discovered by Wordfence PRISM - Wordfence in WordPress Plugin Podlove Podcast Publisher versions = 4.5.3...
WordPress Password Protect WordPress Lite plugin <= 1.9.20 - Insecure Direct Object Reference to Authenticated (Contributor+) Password Protected Post Password Update vulnerability
Insecure Direct Object Reference to Authenticated Contributor+ Password Protected Post Password Update vulnerability discovered by Dmitrii Ignatyev - CleanTalk Inc in WordPress Plugin PPWP versions = 1.9.20...
WordPress Online Scheduling and Appointment Booking System - Bookly plugin <= 27.7 - Authenticated (Staff+) Insecure Direct Object Reference to Sensitive Information Exposure via 'params[id]' Parameter vulnerability
WordPress Online Scheduling and Appointment Booking System - Bookly plugin = 27.7 - Authenticated Staff+ Insecure Direct Object Reference to Sensitive Information Exposure via 'paramsid' Parameter vulnerability discovered by Raihan Adi Arba in WordPress Plugin Bookly versions = 27.7...
WordPress Appointment Booking Calendar - Simply Schedule Appointments Booking Plugin plugin <= 1.6.12.10 - Authenticated (Contributor+) Insecure Direct Object Reference to Sensitive Information Exposure vulnerability
WordPress Appointment Booking Calendar - Simply Schedule Appointments Booking Plugin plugin = 1.6.12.10 - Authenticated Contributor+ Insecure Direct Object Reference to Sensitive Information Exposure vulnerability discovered by Michael Iden Mickhat - Hack The Box in WordPress Plugin Simply Schedu...
PT-2026-77132
Name of the Vulnerable Software and Affected Versions TaxoPress versions prior to 3.51.1 Description TaxoPress is subject to an object injection issue caused by the deserialization of untrusted data. This occurs when the application processes specially crafted serialized data, allowing an attacke...
PT-2026-77082
Subscriber Insecure Direct Object References IDOR in WP Crowdfunding 2.2.1 versions...
PT-2026-77086
Unauthenticated PHP Object Injection in RegistrationMagic = 6.0.9.7 versions...
PT-2026-77047
Unauthenticated PHP Object Injection in FundEngine = 1.7.9 versions...
PT-2026-77109
Unauthenticated PHP Object Injection in Popup by Supsystic = 1.13.0 versions...
CVE-2026-74012: Deserialization of Untrusted Data
Editor PHP Object Injection in TaxoPress = 3.51.0 versions...
CVE-2026-73341: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in RegistrationMagic = 6.0.9.7 versions...
CVE-2026-73380: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in Popup by Supsystic = 1.13.0 versions...
CVE-2026-73366: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in Easy Google Maps = 1.13.0 versions...
CVE-2026-32470: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in FundEngine = 1.7.9 versions...
PT-2026-77156
Name of the Vulnerable Software and Affected Versions Red Hat Advanced Cluster Management for Kubernetes affected versions not specified Description A flaw in the must-gather component allows the cluster Proxy object to be dumped in raw form. This process bypasses the oc inspect redaction mechani...
PT-2026-77056
Name of the Vulnerable Software and Affected Versions OptionTree versions prior to 2.7.4 Description PHP Object Injection occurs when untrusted data is passed to the unserialize function, allowing an attacker to manipulate serialized objects and potentially execute arbitrary code. Recommendations...