110639 matches found
CVE-2026-104899: Improper Control of Filename for Include/Require Statement in PHP Program
The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.8.187 via the 'designtype' parameter parameter. This makes it possible for unauthenticated attackers to include and...
CVE-2026-81797: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in Buzz Stone | Magazine & Viral Blog WordPress Theme = 1.0.2 versions...
CVE-2026-78535: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in Photolia = 1.0.3 versions...
CVE-2026-78531: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in Jacqueline = 2.22 versions...
CVE-2026-78533: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in Qwery = 3.6.1 versions...
CVE-2026-66569: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in Kicker = 2.2.1 versions...
CVE-2026-66567: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in Anesta = 1.5.3 versions...
CVE-2026-66565: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in FC United = 1.1.1 versions...
CVE-2026-66563: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in Windsor = 2.10 versions...
CVE-2026-62125: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in Asia Garden = 1.3.1 versions...
CVE-2026-62123: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in Invetex = 2.18 versions...
CVE-2026-62120: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in Law Office = 3.20 versions...
CVE-2026-62090: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in WineShop = 3.20 versions...
CVE-2026-62077: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in Avala = 1.1.4 versions...
CVE-2026-62054: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in Yacht Rental = 2.6 versions...
CVE-2026-62053: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in Wine House = 3.20 versions...
CVE-2026-62052: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in Tipsy = 1.6 versions...
CVE-2026-62021: Deserialization of Untrusted Data
Subscriber PHP Object Injection in Angio = 1.1.1 versions...