5648 matches found
CVE-2026-49769: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in wpForo Forum = 3.1.0 versions...
CVE-2026-39532: Deserialization of Untrusted Data
Contributor PHP Object Injection in Events Calendar for GeoDirectory = 2.3.25 versions...
CVE-2026-39499: Deserialization of Untrusted Data
Shop manager PHP Object Injection in Advanced Product Fields Product Addons for WooCommerce = 1.6.19 versions...
CVE-2026-39481: Deserialization of Untrusted Data
Author PHP Object Injection in Modula Image Gallery = 2.14.18 versions...
CVE-2026-39478: Deserialization of Untrusted Data
Contributor PHP Object Injection in Anti-Malware Security and Brute-Force Firewall = 4.23.87 versions...
CVE-2026-39434: Deserialization of Untrusted Data
Shop manager PHP Object Injection in CTX Feed = 6.6.26 versions...
CVE-2026-39474: Deserialization of Untrusted Data
Contributor PHP Object Injection in Post Duplicator = 3.0.10 versions...
CVE-2026-39472: Deserialization of Untrusted Data
Shop manager PHP Object Injection in WooCommerce PDF Invoices & Packing Slips 5.9.0 versions...
CVE-2026-39471: Deserialization of Untrusted Data
Author PHP Object Injection in ShortPixel Image Optimizer = 6.4.3 versions...
CVE-2026-27053: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in Broadcast Live Video 7.1.3 versions...
PT-2026-49399
Contributor PHP Object Injection in Events Calendar for GeoDirectory = 2.3.25 versions...
CVE-2026-39498: Deserialization of Untrusted Data
Shop manager PHP Object Injection in YayMail = 4.3.3 versions...
EUVD-2026-35401
TYPO3 CMS has Insecure Deserialization via Core API...
WordPress JetEngine plugin <= 3.8.10 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by VanTastic in WordPress Plugin JetEngine versions = 3.8.10...
WordPress Nifty theme <= 1.4.1 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by Bonds in WordPress Theme Nifty versions = 1.4.1...
GHSA-G82F-9PW7-773W Concrete CMS: PHP Object Injection via unserialize() calls
Concrete CMS below 9.5.2 is vulnerable to PHP Object Injection via unserialize calls in the in Permission, Cache, and Search components. An unauthenticated attacker may trigger arbitrary PHP object instantiation if a malicious serialized payload has been placed in the database. Concrete CMS thank...
Concrete CMS: PHP Object Injection via unserialize() calls
Concrete CMS below 9.5.2 is vulnerable to PHP Object Injection via unserialize calls in the in Permission, Cache, and Search components. An unauthenticated attacker may trigger arbitrary PHP object instantiation if a malicious serialized payload has been placed in the database. Concrete CMS thank...
CVE-2026-10721
Concrete CMS below 9.5.2 is vulnerable to PHP Object Injection via unserialize calls in the in Permission, Cache, and Search components. An unauthenticated attacker may trigger arbitrary PHP object instantiation if a malicious serialized payload has been placed in the database. Thanks XananasX7...
EUVD-2026-35994
Concrete CMS below 9.5.2 is vulnerable to PHP Object Injection via unserialize calls in the in Permission, Cache, and Search components. An unauthenticated attacker may trigger arbitrary PHP object instantiation if a malicious serialized payload has been placed in the database. Thanks XananasX7...
