CVE-2026-84834 WordPress JobSearch plugin <= 3.2.0 - PHP Object Injection vulnerability

Unauthenticated PHP Object Injection in JobSearch = 3.2.0 versions...

CVE-2026-84753 WordPress Mail Mint plugin <= 1.31.0 - PHP Object Injection vulnerability

Unauthenticated PHP Object Injection in Mail Mint = 1.31.0 versions...

CVE-2026-84753

CVE-2026-84753 affects the WordPress Mail Mint plugin in versions 1.31.0 and below , where an unauthenticated PHP Object Injection flaw allows a remote attacker to inject arbitrary serialized objects into the application. The vulnerability is rated CVSS 9.8 (CRITICAL) with high impact to confiden...

CVE-2026-84753 WordPress Mail Mint plugin <= 1.31.0 - PHP Object Injection vulnerability

Unauthenticated PHP Object Injection in Mail Mint = 1.31.0 versions...

EUVD-2026-70589

Unauthenticated PHP Object Injection in Mail Mint = 1.31.0 versions...

CVE-2026-84752 WordPress RTMKit plugin <= 2.1.5 - PHP Object Injection vulnerability

Contributor PHP Object Injection in RTMKit = 2.1.5 versions...

CVE-2026-84752 WordPress RTMKit plugin <= 2.1.5 - PHP Object Injection vulnerability

Contributor PHP Object Injection in RTMKit = 2.1.5 versions...

CVE-2026-84752

CVE-2026-84752 affects the WordPress RTMKit plugin (Rometheme for Elementor) in versions 2.1.5 and earlier . The vulnerability is a PHP Object Injection that can be exploited by a user with Contributor privileges, resulting in high impact on confidentiality, integrity, and availability (CVSS 8.8 ...

EUVD-2026-70590

Contributor PHP Object Injection in RTMKit = 2.1.5 versions...

WordPress JobSearch plugin <= 3.2.0 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Phat RiO in WordPress Plugin JobSearch versions = 3.2.0...

WordPress Mail Mint plugin <= 1.31.0 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by endy in WordPress Plugin Mail Mint versions = 1.31.0...

PT-2026-85119

Unauthenticated PHP Object Injection in JobSearch = 3.2.0 versions...

CVE-2026-84753: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Mail Mint = 1.31.0 versions...

...[ More ]

ILIAS versions prior to 9.22, versions 10.0 through 10.9, and versions 11.0 through 11.2 contain an unauthenticated PHP object injection vulnerability in the Shibboleth logout functionality. An unauthenticated attacker can manipulate stored session data that is subsequently deserialized without...

PT-2026-85095

Contributor PHP Object Injection in RTMKit = 2.1.5 versions...

PT-2026-85096

Name of the Vulnerable Software and Affected Versions Mail Mint versions prior to 1.31.1 Description Mail Mint is subject to PHP Object Injection, a condition where an application deserializes untrusted input, allowing an attacker to inject a PHP Object. While no POP chain a sequence of gadgets...

CVE-2026-84752: Deserialization of Untrusted Data

Contributor PHP Object Injection in RTMKit = 2.1.5 versions...

CVE-2026-84834: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in JobSearch = 3.2.0 versions...

CVE-2023-3360

The Weaver Show Posts WordPress plugin before 1.8.1 unserialises the content of an imported file, which could lead to PHP object injections issues when a high privilege user import a malicious file and a suitable gadget chain is present on the blog...

CVE-2023-3360 Weaver Show Posts < 1.8.1 - Admin+ PHP Object Injection

The Weaver Show Posts WordPress plugin before 1.8.1 unserialises the content of an imported file, which could lead to PHP object injections issues when a high privilege user import a malicious file and a suitable gadget chain is present on the blog...