44660 matches found
CVE-2026-65574: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in Abogado = 1.18 versions...
PT-2026-68567
Name of the Vulnerable Software and Affected Versions Agora versions prior to 2.0 Description The Agora Event & Conference WordPress Theme is susceptible to PHP Object Injection due to the deserialization of untrusted input. This allows unauthenticated attackers to inject a PHP Object. While no P...
CVE-2026-65581: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in AI ANN = 1.29.0 versions...
CVE-2026-65579: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in Agricola = 1.21.0 versions...
CVE-2026-65577: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in Advice = 1.18.0 versions...
CVE-2026-65576: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in Adrena = 1.2.14 versions...
CVE-2026-65572: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in A.Williams = 1.3.1 versions...
CVE-2026-65556: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in WPBruiser no- Captcha anti-Spam = 3.1.43 versions...
CVE-2026-65549: Deserialization of Untrusted Data
Author PHP Object Injection in Jeg Kit for Elementor = 3.2.10 versions...
CVE-2026-65575: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in Accalia = 1.5.3 versions...
PT-2026-68562
Name of the Vulnerable Software and Affected Versions Abelle versions prior to 1.23 Description The Abelle theme for WordPress allows unauthenticated attackers to perform PHP Object Injection through the deserialization of untrusted input. Deserialization is the process of converting a stored dat...
PT-2026-68564
Name of the Vulnerable Software and Affected Versions Accalia versions prior to 1.5.4 Description This issue involves PHP Object Injection caused by the deserialization of untrusted input. An unauthenticated attacker can inject a PHP Object into the system. While no POP chain a sequence of gadget...
PT-2026-68561
Name of the Vulnerable Software and Affected Versions A.Williams versions prior to 1.3.2 Description The A.Williams plugin for WordPress allows unauthenticated attackers to perform PHP Object Injection through the deserialization of untrusted input. This issue occurs when the application processe...
CVE-2026-65573: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in Abelle = 1.22 versions...
PT-2026-68560
Name of the Vulnerable Software and Affected Versions 69 Clothing versions prior to 1.2.11.2 Description The 69 Clothing | Brand Store & Fashion Boutique WordPress Theme is susceptible to PHP Object Injection, a condition where an application deserializes untrusted input, allowing an attacker to...
PT-2026-68563
Name of the Vulnerable Software and Affected Versions Abogado versions prior to 1.19 Description This issue involves PHP Object Injection caused by the deserialization of untrusted input. This allows unauthenticated attackers to inject a PHP Object. While no POP chain a sequence of gadgets used t...
PT-2026-68568
Name of the Vulnerable Software and Affected Versions Agricola versions prior to 1.22.0 Description The Agricola - Agriculture & Organic Farm Theme for WordPress allows unauthenticated attackers to perform PHP Object Injection through the deserialization of untrusted input. PHP Object Injection...
PT-2026-68624
Name of the Vulnerable Software and Affected Versions html sanitize ex versions 0.3.1 through 1.5.2 Description An Inclusion of Functionality from Untrusted Control Sphere issue exists in the HTML5 scrubber. A remote attacker can load an arbitrary document into a trusted page by utilizing the dat...