5479 matches found
CVE-2026-49107: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in Thrive Apprentice 10.8.10.2 versions...
CVE-2026-49075: Deserialization of Untrusted Data
Contributor PHP Object Injection in JetEngine = 3.8.9.1 versions...
CVE-2026-42380: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in AI Lab 5.4.2 versions...
CVE-2026-40761: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in Valeska = 1.2.2 versions...
CVE-2026-40758: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in Léonie = 1.2.1 versions...
CVE-2026-40754: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in Roisin = 1.4 versions...
CVE-2026-40753: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in EasyMeals = 1.5.1 versions...
CVE-2026-40751: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in Ashtanga = 1.2 versions...
CVE-2026-40739: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in LuxeDrive = 1.4 versions...
CVE-2026-40735: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in Reina = 2.1 versions...
CVE-2026-39578: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in Valiance = 1.2 versions...
CVE-2026-39577: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in Playroom = 1.4.1 versions...
CVE-2026-39573: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in Mildhill = 1.5 versions...
CVE-2026-39557: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in NeoBeat = 1.7 versions...
CVE-2026-39554: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in Fidalgo = 1.2.2 versions...
CVE-2026-39545: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in Zermatt = 1.6.1 versions...
CVE-2026-39539: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in Alloggio - Hotel Booking = 2.1.2 versions...
CVE-2026-39529: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in Elementra = 1.0.9 versions...
CVE-2026-12115: Deserialization of Untrusted Data
The Counter Box – Add Countdowns, Timers & Dynamic Counters to WordPress plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.0.13 via deserialization of untrusted input . This makes it possible for authenticated attackers, with administrator-level...