5469 matches found
EUVD-2026-63332
Unauthenticated PHP Object Injection in Forminator = 1.57.0 versions...
CVE-2026-66583
CVE-2026-66583 is an unauthenticated PHP Object Injection vulnerability in the WordPress Forminator plugin , affecting versions
WordPress FreightCo theme <= 1.1.15 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by daroo in WordPress Theme FreightCo versions = 1.1.15...
WordPress Clearfy plugin < 2.4.3 - Admin+ PHP Object Injection via Settings Import vulnerability
Admin+ PHP Object Injection via Settings Import vulnerability discovered by Omar Elshopky in WordPress Plugin Clearfy Cache versions 2.4.3...
WordPress Newsletters plugin < 4.16 - Unauthenticated PHP Object Injection via Date Form Field vulnerability
Unauthenticated PHP Object Injection via Date Form Field vulnerability discovered by Sai Praneeth Koti in WordPress Plugin Newsletters versions 4.16...
WordPress Ajax Search Lite plugin < 4.14.5 - Unauthenticated PHP Object Injection via Search Statistics REST Endpoint vulnerability
Unauthenticated PHP Object Injection via Search Statistics REST Endpoint vulnerability discovered by Jakub Herman in WordPress Plugin Ajax Search Lite versions 4.14.5...
WordPress Flatastic theme <= 2.0 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme Flatastic versions = 2.0...
PT-2026-78985
Unauthenticated PHP Object Injection in FundEngine = 1.7.9 versions...
PT-2026-78976
Name of the Vulnerable Software and Affected Versions Flatastic versions prior to 2.1 Description An unauthenticated PHP Object Injection issue exists. PHP Object Injection occurs when untrusted input is passed to the unserialize function, allowing an attacker to manipulate serialized objects and...
PT-2026-78953
Unauthenticated PHP Object Injection in Forminator = 1.57.0 versions...
CVE-2026-73993: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in FundEngine = 1.7.9 versions...
CVE-2026-66672: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in Flatastic = 2.0 versions...
CVE-2026-66583: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in Forminator = 1.57.0 versions...
WordPress Spectra theme <= 2.6.1 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by Bonds in WordPress Theme Spectra versions = 2.6.1...
CVE-2026-73389
Unauthenticated PHP Object Injection in Kalles Addons = 1.0.6 versions...
CVE-2026-73364
Customer PHP Object Injection in Flexible Subscriptions = 1.8.1 versions...
CVE-2026-73389 WordPress Kalles Addons plugin <= 1.0.6 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Kalles Addons = 1.0.6 versions...
CVE-2026-73389
CVE-2026-73389 is an unauthenticated PHP Object Injection vulnerability in the Kalles Addons WordPress plugin, affecting versions 1.0.6 and earlier . The flaw allows a remote, unauthenticated attacker to achieve full compromise of confidentiality, integrity, and availability, reflected in a CVSS ...
