cve-2026-39440-funnelforms-fix

Corrección CVE-2026-39440 FunnelForms Un plugin de WordPress de instalación directa que bloquea el controlador de importación de demostraciones vulnerable en FunnelForms Pro ≤ 3.8.1 para mitigar la Ejecución Remota de Código CVE-2026-39440, CVSS 9.9. La Vulnerabilidad Campo| Valor ---|--- ID CVE|...

CVE-2024-56059

CVE-2024-56059 Partners = 0.2.0 - 未认证的PHP对象注入 描述 WordPress的Partners插件在版本0.2.0及以下版本中，由于通过反序列化不可信输入，存在PHP对象注入漏洞。这使得未经认证的攻击者能够注入一个PHP对象。受影响软件中不存在已知的POP链。如果目标系统上安装了额外的插件或主题而存在POP链，则可能允许攻击者删除任意文件、获取敏感数据或执行代码。 详情 类型 : plugin 插件标识 : partners 受影响版本 : 0.2.0 CVSS评分 : 9.8 CVSS评级 : 严重 CVSS向量 :...

CVE-2026-46275

CVE-2026-46725 — TYPO3 ceselector 扩展 RCE 通过unserialize Cookie 绕过实现 PHP 对象注入 → 远程代码执行 📋 目录 关于漏洞 技术细节 环境要求 安装 使用 示例 输出格式 工作原理 参考 法律声明 🔍 关于漏洞 字段| 详情 ---|--- CVE ID| CVE-2026-46725 产品| TYPO3 ceselector 扩展 mmc/ceselector 受影响版本| ⚠️ 前提条件： 要利用此漏洞，需要在 TYPO3 配置中启用 Persistent Mode: Static 设置。 🔧 技术细节 攻击流程 1...

WordPress Booklovers theme <= 2.13.0 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme Booklovers versions = 2.13.0...

WordPress Gutentype theme <= 2.1.12 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme Gutentype versions = 2.1.12...

WordPress Balance theme <= 1.12.0 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Bonds in WordPress Theme Balance versions = 1.12.0...

WordPress Camelia theme <= 1.2.15 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Bonds in WordPress Theme Camelia versions = 1.2.15...

WordPress Convex theme <= 1.16.0 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Bonds in WordPress Theme Convex versions = 1.16.0...

WordPress Dwell theme <= 1.16.0 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Bonds in WordPress Theme Dwell versions = 1.16.0...

WordPress Edema theme <= 1.2.2.2 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Bonds in WordPress Theme Edema versions = 1.2.2.2...

WordPress Greeny theme <= 2.10.0 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Bonds in WordPress Theme Greeny versions = 2.10.0...

WordPress Hogwords theme <= 1.2.7 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Bonds in WordPress Theme Hogwords versions = 1.2.7...

WordPress Hygia theme <= 1.21.0 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Bonds in WordPress Theme Hygia versions = 1.21.0...

WordPress IPharm theme <= 1.2.4 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Bonds in WordPress Theme IPharm versions = 1.2.4...

WordPress Let's Play theme <= 1.1.15 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Bonds in WordPress Theme Let's Play versions = 1.1.15...

WordPress Partiso theme <= 1.1.13 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Bonds in WordPress Theme Partiso versions = 1.1.13...

WordPress Rosalinda theme <= 1.2.4 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Bonds in WordPress Theme Rosalinda versions = 1.2.4...

WordPress Smart Casa theme <= 1.0.12 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Bonds in WordPress Theme Smart Casa versions = 1.0.12...

WordPress Smash theme <= 1.12.0 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Bonds in WordPress Theme Smash versions = 1.12.0...

WordPress Tantra theme <= 2.9.0 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Bonds in WordPress Theme Tantra versions = 2.9.0...