5212 matches found
CVE-2026-84753
abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · CVE-2026-84753 CVE-2026-84753 Mail Mint 1.31.0 - WPFunnels I am @abraxasnull. Loopback lab. The client is CVE-2026-84753-Abraxas-Labs.py. The function is named safe. Unauthenticated REST mint-form-submit copies extra...
CVE-2023-27372-SPIP-4.2.1-Unauthenticated-RCE-PoC
CVE-2023-27372 — SPIP Unauthenticated remote code execution vulnerability in SPIP before 4.2.1. The oubli parameter in the password reset form is vulnerable to PHP object injection due to mishandled deserialization. A crafted serialized payload is executed server-side as the web user, and the...
cve-2026-39440-funnelforms-fix
Corrección CVE-2026-39440 FunnelForms Un plugin de WordPress de instalación directa que bloquea el controlador de importación de demostraciones vulnerable en FunnelForms Pro ≤ 3.8.1 para mitigar la Ejecución Remota de Código CVE-2026-39440, CVSS 9.9. La Vulnerabilidad Campo| Valor ---|--- ID CVE|...
CVE-2026-97284
Contributor PHP Object Injection in Icegram = 3.1.31 versions...
CVE-2026-94390
Editor PHP Object Injection in Hide Shipping Method For WooCommerce = 1.5.4 versions...
CVE-2023-46615
CVE-2023-46615 KD Coming Soon = 1.7 - Inyección de Objetos PHP no autenticada a través de cetitle Descripción: El plugin KD Coming Soon para WordPress es vulnerable a la Inyección de Objetos PHP en todas las versiones hasta la 1.7 inclusive, mediante la deserialización de la entrada no confiable...
CVE-2024-56059
CVE-2024-56059 Partners = 0.2.0 - Inyección de Objetos PHP No Autenticada Descripción El plugin Partners para WordPress es vulnerable a la Inyección de Objetos PHP en versiones hasta la 0.2.0 inclusive, a través de la deserialización de entrada no confiable. Esto permite que atacantes no...
EUVD-2026-90840
Contributor PHP Object Injection in Icegram = 3.1.31 versions...
CVE-2026-97284
The WordPress Icegram plugin (versions
CVE-2026-97284 WordPress Icegram plugin <= 3.1.31 - PHP Object Injection vulnerability
Contributor PHP Object Injection in Icegram = 3.1.31 versions...
CVE-2026-94390 WordPress Hide Shipping Method For WooCommerce plugin <= 1.5.4 - PHP Object Injection vulnerability
Editor PHP Object Injection in Hide Shipping Method For WooCommerce = 1.5.4 versions...
EUVD-2026-90854
Editor PHP Object Injection in Hide Shipping Method For WooCommerce = 1.5.4 versions...
CVE-2026-94390
The Hide Shipping Method For WooCommerce plugin for WordPress versions
CVE-2026-94390 WordPress Hide Shipping Method For WooCommerce plugin <= 1.5.4 - PHP Object Injection vulnerability
Editor PHP Object Injection in Hide Shipping Method For WooCommerce = 1.5.4 versions...
CVE-2026-46275
CVE-2026-46725 — TYPO3 ceselector Extension RCE PHP Object Injection viaunserialize Cookie Bypass → Remote Code Execution 📋 Table of Contents About the Vulnerability Technical Details Requirements Installation Usage Examples Output Format How It Works References Legal Disclaimer 🔍 About the...
exploit-CVE-2025-49113
CVE-2025-49113 PoC 저장소 CVE-2025-49113 개요 CVE-2025-49113은 1.5.10 및 1.6.11 이전 버전의 Roundcube Webmail에 영향을 미치는 치명적인 취약점입니다. 2025년에 발견된 이 결함은 /settings/upload.php 엔드포인트의 PHP 객체 역직렬화를 통한 원격 코드 실행RCE을 허용합니다. 이 취약점은 from 매개변수의 부적절한 처리로 인해 발생하며, 인증된 사용자가 서버에서 임의의 코드를 실행하기 위해 악용할 수 있습니다. 이 문제는 공격자가 무단 액세스...
CVE-2026-97256
Editor PHP Object Injection in Page Builder by SiteOrigin = 2.36.0 versions...
CVE-2026-97291
Contributor PHP Object Injection in Schema & Structured Data for WP & AMP = 1.66 versions...