CVE-2026-39560: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Hiroshi = 1.5.1 versions...

CVE-2026-39442: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in PressMart = 1.2.26 versions...

CVE-2026-49075: Deserialization of Untrusted Data

Contributor PHP Object Injection in JetEngine = 3.8.9.1 versions...

CVE-2026-40733: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in ShiftUp = 1.3 versions...

CVE-2025-69122: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in SeaFood Company = 1.4 versions...

CVE-2026-40760: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Behold = 1.5 versions...

CVE-2026-40759: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Esmée = 1.4 versions...

CVE-2026-40758: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Léonie = 1.2.1 versions...

CVE-2026-40735: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Reina = 2.1 versions...

CVE-2026-39580: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Micdrop = 1.3.1 versions...

CVE-2026-39545: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Zermatt = 1.6.1 versions...

CVE-2026-40725: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in WooCommerce Product Filters 2.0.6 versions...

PT-2026-50400

Unauthenticated PHP Object Injection in Hiroshi = 1.5.1 versions...

PT-2026-50404

Name of the Vulnerable Software and Affected Versions ShiftUp versions 1.3 and earlier Description An unauthenticated PHP Object Injection issue exists in the software. PHP Object Injection occurs when user-supplied input is passed to the unserialize function without proper validation, potentiall...

CVE-2026-54194: Deserialization of Untrusted Data

Contributor PHP Object Injection in Fusion Builder = 3.15.4 versions...

CVE-2026-52706: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in JetEngine = 3.8.10 versions...

CVE-2026-49107: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Thrive Apprentice 10.8.10.2 versions...

CVE-2026-54806: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in WP Activity Log = 5.6.3.1 versions...

CVE-2026-39529: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Elementra = 1.0.9 versions...

CVE-2026-49108: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Moderno 1.43 versions...