CVE-2026-39573: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Mildhill = 1.5 versions...

CVE-2026-39557: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in NeoBeat = 1.7 versions...

CVE-2026-39554: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Fidalgo = 1.2.2 versions...

CVE-2026-39545: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Zermatt = 1.6.1 versions...

CVE-2026-39539: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Alloggio - Hotel Booking = 2.1.2 versions...

CVE-2025-60205: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in ThemeREX Addons = 2.36.1.1 versions...

PT-2026-50407

Unauthenticated PHP Object Injection in Zoya = 1.4 versions...

CVE-2026-40760: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Behold = 1.5 versions...

CVE-2026-12256: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in ThemeFusion Fusion Builder fusion-builder allows Object Injection.This issue affects Fusion Builder: from n/a through 3.15.3...

CVE-2026-52706: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in JetEngine = 3.8.10 versions...

CVE-2026-39560: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Hiroshi = 1.5.1 versions...

PT-2026-50409

Unauthenticated PHP Object Injection in Moderno 1.43 versions...

PT-2026-50400

Unauthenticated PHP Object Injection in Hiroshi = 1.5.1 versions...

CVE-2026-39576: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in SingleMalt = 1.5 versions...

CVE-2026-40736: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Laurits = 1.5.1 versions...

CVE-2026-40751: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Ashtanga = 1.2 versions...

CVE-2026-40754: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Roisin = 1.4 versions...

CVE-2026-54194: Deserialization of Untrusted Data

Contributor PHP Object Injection in Fusion Builder = 3.15.4 versions...

CVE-2025-69108: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Hot Coffee = 1.7 versions...

CVE-2025-69122: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in SeaFood Company = 1.4 versions...