5599 matches found
CVE-2026-27429 WordPress Nifty theme <= 1.4.1 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Nifty = 1.4.1 versions...
CVE-2026-12256
The CVE concerns WordPress sites using the Avada theme ≤ 3.15.3, where a PHP Object Injection vulnerability exists in the Contributor component. The issue is triggered remotely over the network (attack vector: NETWORK, low complexity, required privileges: LOW, no user interaction). The impact is ...
CVE-2025-69122
CVE-2025-69122 affects WordPress SeaFood Company theme versions up to 1.4. It describes an unauthenticated PHP Object Injection vulnerability with a CVSS v3.1 base score of 9.8 (NETWORK, NONE/LOW ACCESS, HIGH impact on confidentiality, integrity, and availability). The connected documents confirm...
CVE-2025-69108
CVE-2025-69108 is an unauthenticated PHP Object Injection in the WordPress theme Hot Coffee (<= 1.7). The description specifies unauthenticated object injection in Hot Coffee
CVE-2025-69108 WordPress Hot Coffee theme <= 1.7 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Hot Coffee = 1.7 versions...
CVE-2026-54194 WordPress Fusion Builder plugin <= 3.15.4 - PHP Object Injection vulnerability
Contributor PHP Object Injection in Fusion Builder = 3.15.4 versions...
CVE-2026-54194
CVE-2026-54194 concerns the WordPress Fusion Builder plugin, affected versions ≤ 3.15.4, with a PHP Object Injection vulnerability identified in the CVE record. The provided information confirms the affected component (Fusion Builder), the vulnerable version range, and the nature of the issue (PH...
WordPress WP Activity Log plugin <= 5.6.3.1 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by daroo in WordPress Plugin WP Activity Log versions = 5.6.3.1...
PT-2026-50108
Unauthenticated PHP Object Injection in Micdrop = 1.3.1 versions...
PT-2026-50116
Unauthenticated PHP Object Injection in Esmée = 1.4 versions...
PT-2026-50117
Unauthenticated PHP Object Injection in Behold = 1.5 versions...
PT-2026-50085
Contributor PHP Object Injection in Avada = 3.15.3 versions...
PT-2026-50111
Unauthenticated PHP Object Injection in LuxeDrive = 1.4 versions...
PT-2026-50102
Unauthenticated PHP Object Injection in Fidalgo = 1.2.2 versions...
EUVD-2026-36961
Contributor PHP Object Injection in Events Calendar for GeoDirectory = 2.3.25 versions...
EUVD-2026-36940
Author PHP Object Injection in Modula Image Gallery = 2.14.18 versions...
EUVD-2026-36946
Shop manager PHP Object Injection in Advanced Product Fields Product Addons for WooCommerce = 1.6.19 versions...
EUVD-2026-36945
Shop manager PHP Object Injection in YayMail = 4.3.3 versions...
