PT-2026-68562

Name of the Vulnerable Software and Affected Versions Abelle versions prior to 1.23 Description The Abelle theme for WordPress allows unauthenticated attackers to perform PHP Object Injection through the deserialization of untrusted input. Deserialization is the process of converting a stored dat...

PT-2026-68569

Name of the Vulnerable Software and Affected Versions AI ANN versions prior to 1.29.1 Description The AI ANN - AI Generator & AI Agency WordPress Theme is subject to PHP Object Injection due to the deserialization of untrusted input. This allows unauthenticated attackers to inject a PHP Object...

CVE-2026-65574: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Abogado = 1.18 versions...

PT-2026-68680

Name of the Vulnerable Software and Affected Versions Amazon Strands Agents Tools versions prior to 0.8.3 Description An insecure direct object reference exists in the mongodb memory, elasticsearch memory, and mem0 memory tools. Remote authenticated users can access, modify, or delete memories...

CVE-2026-65581: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in AI ANN = 1.29.0 versions...

CVE-2026-65579: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Agricola = 1.21.0 versions...

CVE-2026-65577: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Advice = 1.18.0 versions...

CVE-2026-65576: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Adrena = 1.2.14 versions...

CVE-2026-65572: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in A.Williams = 1.3.1 versions...

CVE-2026-65571: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in 69 Clothing = 1.2.11.1 versions...

CVE-2026-65556: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in WPBruiser no- Captcha anti-Spam = 3.1.43 versions...

CVE-2026-65552: Deserialization of Untrusted Data

Subscriber PHP Object Injection in Export User Data = 2.2.6 versions...

CVE-2026-65549: Deserialization of Untrusted Data

Author PHP Object Injection in Jeg Kit for Elementor = 3.2.10 versions...

CVE-2026-28139: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Ajax Search Lite = 4.14.4 versions...

CVE-2026-65575: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Accalia = 1.5.3 versions...

PT-2026-68564

Name of the Vulnerable Software and Affected Versions Accalia versions prior to 1.5.4 Description This issue involves PHP Object Injection caused by the deserialization of untrusted input. An unauthenticated attacker can inject a PHP Object into the system. While no POP chain a sequence of gadget...

PT-2026-68561

Name of the Vulnerable Software and Affected Versions A.Williams versions prior to 1.3.2 Description The A.Williams plugin for WordPress allows unauthenticated attackers to perform PHP Object Injection through the deserialization of untrusted input. This issue occurs when the application processe...

CVE-2026-65573: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Abelle = 1.22 versions...

PT-2026-68560

Name of the Vulnerable Software and Affected Versions 69 Clothing versions prior to 1.2.11.2 Description The 69 Clothing | Brand Store & Fashion Boutique WordPress Theme is susceptible to PHP Object Injection, a condition where an application deserializes untrusted input, allowing an attacker to...

PT-2026-68563

Name of the Vulnerable Software and Affected Versions Abogado versions prior to 1.19 Description This issue involves PHP Object Injection caused by the deserialization of untrusted input. This allows unauthenticated attackers to inject a PHP Object. While no POP chain a sequence of gadgets used t...