5350 matches found
PT-2026-107742
The Block AJAX module enables you to load blocks asynchronously via Ajax. The module doesn't sufficiently validate user-supplied data which is used to construct a block. In the worst case scenario, this can lead to PHP Object Injection and Remote Code Execution. The vulnerability is mitigated by...
Block AJAX - Highly critical - PHP object injection - SA-CONTRIB-2026-192
The Block AJAX module enables you to load blocks asynchronously via Ajax. The module doesn't sufficiently validate user-supplied data which is used to construct a block. In the worst case scenario, this can lead to PHP Object Injection and Remote Code Execution. The vulnerability is mitigated by...
CVE-2026-3296
CVE-2026-3296 CVE-2026-3296 es una vulnerabilidad crítica de inyección de objetos PHP no autenticada con CVSS 9.8 en el plugin Everest Forms de WordPress CVE-2026-3296 — Escáner de Inyección de Objetos PHP en Everest Forms Plugin: Everest Forms – Formulario de contacto, formulario de pago,...
CVE-2023-46615
CVE-2023-46615 KD Coming Soon = 1.7 - 未经身份验证的PHP对象注入（通过cetitle） 描述： WordPress的KD Coming Soon插件在所有版本（包括1.7）中容易通过反序列化不受信任的输入cetitle（位于易受攻击的kdcemailer函数中）导致PHP对象注入。这使得未经身份验证的攻击者能够注入PHP对象。易受攻击的插件中不存在POP链。如果目标系统上安装了其他插件或主题中存在POP链，则可能允许攻击者删除任意文件、检索敏感数据或执行代码。 严重性：高 CVE ID：CVE-2023-46615 CVSS评分：8.1...
CVE-2026-19658
CVE-2026-19658 — Inyección de Objetos PHP No Autenticada en Give Tributes Prueba de concepto en Python 3: escáner y ayudante de explotación de la cadena de donación para CVE-2026-19658 en el complemento de WordPress Give - Tributes Liquid Web / GiveWP. | ---|--- Plataforma| Complemento de WordPre...
CVE-2026-39797
Unauthenticated PHP Object Injection in GDPR Framework By Data443 = 2.5.0 versions...
CVE-2026-104747
Unauthenticated PHP Object Injection in Haaken = 1.5 versions...
CVE-2026-104747
The Haaken WordPress theme versions
CVE-2026-104747 WordPress Haaken theme <= 1.5 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Haaken = 1.5 versions...
CVE-2026-104747 WordPress Haaken theme <= 1.5 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Haaken = 1.5 versions...
EUVD-2026-93080
Unauthenticated PHP Object Injection in Haaken = 1.5 versions...
CVE-2026-39797 WordPress GDPR Framework By Data443 plugin <= 2.5.0 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in GDPR Framework By Data443 = 2.5.0 versions...
CVE-2026-39797 WordPress GDPR Framework By Data443 plugin <= 2.5.0 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in GDPR Framework By Data443 = 2.5.0 versions...
CVE-2026-39797
The WordPress GDPR Framework By Data443 plugin versions
EUVD-2026-93041
Unauthenticated PHP Object Injection in GDPR Framework By Data443 = 2.5.0 versions...
Exploit for CVE-2026-104905
CVE-2026-104905 — PHP Object Injection in FacturaScripts Widg...
CVE-2020-28032_PoC
CVE-2020-28032PoC CVE-2020-28032 的 PoC（这只是 WordPress RequestsUtilityFilteredIterator Object callback:protected = system storage:ArrayIterator:private = Array 0 = id uid=1000nth347 gid=1000nth347 groups=1000nth347,4adm,24cdrom,27sudo,30dip,46plugdev,120lpadmin,132lxd,133sambashare...
CVE-2026-48909-Joomla-SP-Exploit
CVE-2026-48909 Joomla SP LMS — 未认证的PHP对象注入→RCE CVE-2026-48909 的概念验证评估工具 作者：Sudeepa Wanigarathna !IMPORTANT 仅限授权使用。 此工具用于安全研究、教育以及测试您拥有或已获得明确书面许可的系统。未经授权访问计算机系统是违法的。作者对滥用不承担任何责任。 目录 概述 漏洞详情 功能特性 安装 快速开始 使用指南 命令参考 Payload 类型 攻击链 输出示例 故障排除 仓库结构 版本历史 免责声明 作者 概述 CVE-2026-48909 是 Joomla SP LMS 扩展中的一个严重...