5469 matches found
WordPress AI ANN theme <= 1.29.0 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme AI ANN versions = 1.29.0...
WordPress Agricola theme <= 1.21.0 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by Bonds in WordPress Theme Agricola versions = 1.21.0...
WordPress Agora theme <= 1.9 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by Bonds in WordPress Theme Agora versions = 1.9...
WordPress Advice theme <= 1.18.0 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by Bonds in WordPress Theme Advice versions = 1.18.0...
WordPress Abogado theme <= 1.18 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by Bonds in WordPress Theme Abogado versions = 1.18...
CVE-2026-65571: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in 69 Clothing = 1.2.11.1 versions...
PT-2026-68564
Name of the Vulnerable Software and Affected Versions Accalia versions prior to 1.5.4 Description This issue involves PHP Object Injection caused by the deserialization of untrusted input. An unauthenticated attacker can inject a PHP Object into the system. While no POP chain a sequence of gadget...
CVE-2026-65575: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in Accalia = 1.5.3 versions...
PT-2026-68563
Name of the Vulnerable Software and Affected Versions Abogado versions prior to 1.19 Description This issue involves PHP Object Injection caused by the deserialization of untrusted input. This allows unauthenticated attackers to inject a PHP Object. While no POP chain a sequence of gadgets used t...
PT-2026-68562
Name of the Vulnerable Software and Affected Versions Abelle versions prior to 1.23 Description The Abelle theme for WordPress allows unauthenticated attackers to perform PHP Object Injection through the deserialization of untrusted input. Deserialization is the process of converting a stored dat...
PT-2026-68561
Name of the Vulnerable Software and Affected Versions A.Williams versions prior to 1.3.2 Description The A.Williams plugin for WordPress allows unauthenticated attackers to perform PHP Object Injection through the deserialization of untrusted input. This issue occurs when the application processe...
PT-2026-68565
Name of the Vulnerable Software and Affected Versions Adrena versions prior to 1.2.15 Description This issue involves PHP Object Injection caused by the deserialization of untrusted input. An unauthenticated attacker can inject a PHP Object into the system. While no POP chain a sequence of gadget...
PT-2026-68560
Name of the Vulnerable Software and Affected Versions 69 Clothing versions prior to 1.2.11.2 Description The 69 Clothing | Brand Store & Fashion Boutique WordPress Theme is susceptible to PHP Object Injection, a condition where an application deserializes untrusted input, allowing an attacker to...
PT-2026-68566
Name of the Vulnerable Software and Affected Versions Advice versions prior to 1.18.1 Description The Advice - Psychology, Therapy & Counseling Theme for WordPress allows unauthenticated attackers to perform PHP Object Injection through the deserialization of untrusted input. PHP Object Injection...
CVE-2026-65581: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in AI ANN = 1.29.0 versions...
CVE-2026-65579: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in Agricola = 1.21.0 versions...
CVE-2026-65576: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in Adrena = 1.2.14 versions...
CVE-2026-65577: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in Advice = 1.18.0 versions...