Lucene search
+L

5549 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/15 12:00 a.m.•3 views

CVE-2026-39481: Deserialization of Untrusted Data

Author PHP Object Injection in Modula Image Gallery = 2.14.18 versions...

7.2CVSS5.7AI score0.00539EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/15 12:00 a.m.•5 views

CVE-2026-49763: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Integration for Contact Form 7 HubSpot = 1.3.7 versions...

9.8CVSS5.7AI score0.00564EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/15 12:00 a.m.•4 views

CVE-2026-9691: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Integration for ActiveCampaign and Contact Form 7, WPForms, Elementor, Ninja Forms = 1.1.1 versions...

9.8CVSS5.7AI score0.00564EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/15 12:00 a.m.•2 views

CVE-2026-49769: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in wpForo Forum = 3.1.0 versions...

9.8CVSS5.7AI score0.00564EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/15 12:00 a.m.•2 views

CVE-2026-49768: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Happyforms = 1.26.13 versions...

9.8CVSS5.7AI score0.00564EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/15 12:00 a.m.•3 views

CVE-2026-49109: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Integration for Salesforce and Contact Form 7, WPForms, Elementor, Formidable, Ninja Forms = 1.4.3 versions...

9.8CVSS5.7AI score0.00564EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/15 12:00 a.m.•6 views

CVE-2026-49105: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in WP Zendesk for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms = 1.1.4 versions...

9.8CVSS5.7AI score0.00564EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/15 12:00 a.m.•5 views

CVE-2026-49104: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Integration for Keap/infusionsoft and Contact Form 7, WPForms, Elementor, Formidable, Ninja Forms = 1.2.1 versions...

9.8CVSS5.7AI score0.00564EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/15 12:00 a.m.•7 views

CVE-2026-49085: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in WP Insightly for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms = 1.1.4 versions...

9.8CVSS5.7AI score0.00564EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/15 12:00 a.m.•3 views

CVE-2026-42687: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in EventPrime = 4.3.2.1 versions...

8.1CVSS5.7AI score0.00436EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/15 12:00 a.m.•3 views

CVE-2026-39499: Deserialization of Untrusted Data

Shop manager PHP Object Injection in Advanced Product Fields Product Addons for WooCommerce = 1.6.19 versions...

7.2CVSS5.7AI score0.00539EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/15 12:00 a.m.•2 views

CVE-2026-39474: Deserialization of Untrusted Data

Contributor PHP Object Injection in Post Duplicator = 3.0.10 versions...

8.8CVSS5.7AI score0.00518EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/15 12:00 a.m.•4 views

CVE-2026-39472: Deserialization of Untrusted Data

Shop manager PHP Object Injection in WooCommerce PDF Invoices & Packing Slips 5.9.0 versions...

7.2CVSS5.7AI score0.00539EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/15 12:00 a.m.•4 views

CVE-2026-39471: Deserialization of Untrusted Data

Author PHP Object Injection in ShortPixel Image Optimizer = 6.4.3 versions...

7.2CVSS5.7AI score0.00539EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/15 12:00 a.m.•3 views

CVE-2026-39434: Deserialization of Untrusted Data

Shop manager PHP Object Injection in CTX Feed = 6.6.26 versions...

7.2CVSS5.7AI score0.00539EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/06/15 12:00 a.m.•36 views

PT-2026-49507

Unauthenticated PHP Object Injection in WP Zendesk for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms = 1.1.4 versions...

9.8CVSS5.3AI score0.00564EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/15 12:00 a.m.•7 views

CVE-2026-39498: Deserialization of Untrusted Data

Shop manager PHP Object Injection in YayMail = 4.3.3 versions...

7.2CVSS5.7AI score0.00539EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/06/15 12:00 a.m.•33 views

PT-2026-49380

Contributor PHP Object Injection in Anti-Malware Security and Brute-Force Firewall = 4.23.87 versions...

8.8CVSS5.3AI score0.00518EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/15 12:00 a.m.•5 views

CVE-2026-39478: Deserialization of Untrusted Data

Contributor PHP Object Injection in Anti-Malware Security and Brute-Force Firewall = 4.23.87 versions...

8.8CVSS5.7AI score0.00518EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/15 12:00 a.m.•3 views

CVE-2026-49106: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Integration for Contact Form 7 and Constant Contact = 1.1.6 versions...

9.8CVSS5.7AI score0.00564EPSS
SaveExploits0References2
Rows per page
Query Builder