5543 matches found
WordPress Mail Mint plugin <= 1.31.0 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by endy in WordPress Plugin Mail Mint versions = 1.31.0...
PT-2026-85095
Contributor PHP Object Injection in RTMKit = 2.1.5 versions...
CVE-2026-84753: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in Mail Mint = 1.31.0 versions...
CVE-2026-84834: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in JobSearch = 3.2.0 versions...
CVE-2026-84752: Deserialization of Untrusted Data
Contributor PHP Object Injection in RTMKit = 2.1.5 versions...
PT-2026-85096
Name of the Vulnerable Software and Affected Versions Mail Mint versions prior to 1.31.1 Description Mail Mint is subject to PHP Object Injection, a condition where an application deserializes untrusted input, allowing an attacker to inject a PHP Object. While no POP chain a sequence of gadgets...
PT-2026-85119
Unauthenticated PHP Object Injection in JobSearch = 3.2.0 versions...
...[ More ]
ILIAS versions prior to 9.22, versions 10.0 through 10.9, and versions 11.0 through 11.2 contain an unauthenticated PHP object injection vulnerability in the Shibboleth logout functionality. An unauthenticated attacker can manipulate stored session data that is subsequently deserialized without...
CVE-2023-3360
The Weaver Show Posts WordPress plugin before 1.8.1 unserialises the content of an imported file, which could lead to PHP object injections issues when a high privilege user import a malicious file and a suitable gadget chain is present on the blog...
CVE-2023-3360
The Weaver Show Posts WordPress plugin before 1.8.1 unserialises the content of an imported file, enabling PHP object injection when a high-privilege user imports a malicious file and a suitable gadget chain exists on the blog. The vulnerability is rated CVSS 3.3 (LOW) with high attack complexity...
CVE-2023-3360 Weaver Show Posts < 1.8.1 - Admin+ PHP Object Injection
The Weaver Show Posts WordPress plugin before 1.8.1 unserialises the content of an imported file, which could lead to PHP object injections issues when a high privilege user import a malicious file and a suitable gadget chain is present on the blog...
EUVD-2023-60614
The Weaver Show Posts WordPress plugin before 1.8.1 unserialises the content of an imported file, which could lead to PHP object injections issues when a high privilege user import a malicious file and a suitable gadget chain is present on the blog...
CVE-2023-3360 Weaver Show Posts < 1.8.1 - Admin+ PHP Object Injection
The Weaver Show Posts WordPress plugin before 1.8.1 unserialises the content of an imported file, which could lead to PHP object injections issues when a high privilege user import a malicious file and a suitable gadget chain is present on the blog...
CVE-2026-81283
Subscriber PHP Object Injection in WP User Frontend = 4.3.10 versions...
EUVD-2026-69930
Unauthenticated PHP Object Injection in Ninja Forms - Layout & Styles = 3.0.31 versions...
CVE-2026-81772 WordPress Ninja Forms - Layout & Styles plugin <= 3.0.31 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Ninja Forms - Layout & Styles = 3.0.31 versions...
CVE-2026-81772 WordPress Ninja Forms - Layout & Styles plugin <= 3.0.31 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Ninja Forms - Layout & Styles = 3.0.31 versions...
CVE-2026-81283
WP User Frontend is a WordPress plugin affected by a PHP Object Injection vulnerability in versions 4.3.10 and below . The vulnerability requires low privileges (subscriber-level access), no user interaction, and a low attack complexity, making it accessible to any authenticated subscriber on a s...