CVE-2026-40753: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in EasyMeals = 1.5.1 versions...

CVE-2026-40739: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in LuxeDrive = 1.4 versions...

CVE-2026-40735: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Reina = 2.1 versions...

CVE-2026-39578: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Valiance = 1.2 versions...

CVE-2026-39577: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Playroom = 1.4.1 versions...

CVE-2026-39573: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Mildhill = 1.5 versions...

CVE-2026-39557: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in NeoBeat = 1.7 versions...

CVE-2026-39554: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Fidalgo = 1.2.2 versions...

CVE-2026-39545: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Zermatt = 1.6.1 versions...

CVE-2026-39539: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Alloggio - Hotel Booking = 2.1.2 versions...

CVE-2026-39529: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Elementra = 1.0.9 versions...

CVE-2025-69108: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Hot Coffee = 1.7 versions...

CVE-2025-60205: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in ThemeREX Addons = 2.36.1.1 versions...

PT-2026-50305

Unauthenticated PHP Object Injection in Mildhill = 1.5 versions...

PT-2026-50407

Unauthenticated PHP Object Injection in Zoya = 1.4 versions...

CVE-2026-40760: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Behold = 1.5 versions...

CVE-2026-12256: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in ThemeFusion Fusion Builder fusion-builder allows Object Injection.This issue affects Fusion Builder: from n/a through 3.15.3...

CVE-2026-52706: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in JetEngine = 3.8.10 versions...

CVE-2026-40733: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in ShiftUp = 1.3 versions...

CVE-2026-54194: Deserialization of Untrusted Data

Contributor PHP Object Injection in Fusion Builder = 3.15.4 versions...