CVE-2026-96745

Deserialization of untrusted data in the command monitoring support of the MongoDB PHP Driver can cause class names embedded in document content to be honored when the driver builds monitoring event objects. When an application registers a command monitoring subscriber and includes untrusted data...

CVE-2026-96745 PHP object injection via unsuppressible __pclass class inference in command monitoring events

Deserialization of untrusted data in the command monitoring support of the MongoDB PHP Driver can cause class names embedded in document content to be honored when the driver builds monitoring event objects. When an application registers a command monitoring subscriber and includes untrusted data...

CVE-2025-43960

CVE-2025-43960 - Inyección de Objetos PHP en Adminer 4.8.1 vía Monolog - Denegación de Servicio DoS Después de meses esperando una respuesta de MITRE, obtuve el CVE-2025-43960 con un ataque de Inyección de Objetos PHP contra el servicio Adminer 4.8.1, causando una Denegación de Servicio DoS...

CVE-2018-20718

CVE-2018-20718 这是CVE-2018-20718的概念验证（POC）。它是一个PHP对象注入漏洞，影响Pydio 8.2.1之前的所有版本，并导致未认证远程代码执行。该漏洞最初由RIPS发现。 我在Pydio\Core\Controller\ShutdownScheduler中发现了一个gadget，如果与已知的GuzzleHttp\Psr7\FnStream gadget结合使用，可以实现远程代码执行。 利用示例 技术细节 https://blog.ripstech.com/2018/pydio-unauthenticated-remote-code-execution/...

CVE-2019-6340

CVE-2019-6340 仅供教育目的 运行 root@kitploit: $ docker run --rm -p 8080:80 knqyf263/cve-2019-6340 利用 GET root@kitploit: $ curl -XGET -H "Content-Type: application/hal+json" "http://localhost:8080/node/1?format=haljson" -d ' "link": "value": "link", "options":...

CVE-2026-80513

The wpForo Forum WordPress plugin before 3.1.6 does not restrict which classes may be instantiated when it deserializes a user-supplied profile field value, allowing authenticated users with Subscriber-level access and above to inject a PHP Object. No POP chain is present in the wpForo Forum...

EUVD-2026-85796

The wpForo Forum WordPress plugin before 3.1.6 does not restrict which classes may be instantiated when it deserializes a user-supplied profile field value, allowing authenticated users with Subscriber-level access and above to inject a PHP Object. No POP chain is present in the wpForo Forum...

CVE-2026-80513

The wpForo Forum WordPress plugin versions prior to 3.1.6 is vulnerable to PHP Object Injection . The root cause is a failure to restrict which classes may be instantiated during the deserialization of a user-supplied profile field value. This allows authenticated users with Subscriber-level acce...

CVE-2026-80513 wpForo Forum < 3.1.6 - Subscriber+ PHP Object Injection via Profile Fields

The wpForo Forum WordPress plugin before 3.1.6 does not restrict which classes may be instantiated when it deserializes a user-supplied profile field value, allowing authenticated users with Subscriber-level access and above to inject a PHP Object. No POP chain is present in the wpForo Forum...

My Geo Posts Free <= 1.2 - PHP Object Injection

The My Geo Posts Free plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 1.2 via deserialization of untrusted input. This makes it possible for unauthenticated attackers to inject a PHP Object. No known POP chain is present in the vulnerable software. If ...

GiveWP - PHP Object Injection

The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.14.1 via deserialization of untrusted input from the 'givetitle' parameter. id: CVE-2024-5932 info: name: GiveWP - PHP Object Injection author:...

GiveWP Donation Plugin <= 3.16.1 - Unauthenticated PHP Object Injection

The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.16.1. This is due to insufficient input validation on user-supplied data. An unauthenticated attacker can inject a serialized PHP object, which...

CVE-2026-54806

WP Activity Log PHP 对象注入 CVE-2026-54806 PoC 📜 描述 CVE-2026-54806 是 Melapress 开发的 WP Activity Log WordPress 插件（wp-security-audit-log）中一个严重的（CVSS 9.8）未认证 PHP 对象注入漏洞。未认证的攻击者可以在任何触发日志事件（例如登录失败）的请求中，通过 User-Agent 头注入序列化的 PHP 对象。注入的载荷会存储在数据库中，当管理员访问 WordPress 仪表盘时会被无限制地反序列化，从而实现盲远程代码执行（不会向攻击者返回任何输出）。...

CVE-2025-7384

CVE-2025-7384 — Inyección de Objetos PHP a RCE Plugin: Database for Contact Form 7 contact-form-entries ≤ 1.4.3 CVSS: 9.8 Crítico CWE: CWE-502 — Deserialización de Datos No Confiables Requisito de autenticación: Ninguno No autenticado Impacto: Ejecución Remota de Código Tabla de Contenidos 1...

CVE-2026-48909

CVE-2026-48909 — SP LMS PHP对象注入 → RCE 未认证远程代码执行 —— 通过JoomShaper SP LMS comsplms ≤ 4.1.3 for Joomla CMS中的PHP对象注入实现。 作者： Amin İsayev / Proxima Cyber Security 概述 SP LMS 是JoomShaper开发的一款流行的Joomla学习管理系统扩展，拥有超过10万次安装。版本≤ 4.1.3将 lmsOrders cookie 直接传递给 unserialize...

EUVD-2026-85506

Shop manager PHP Object Injection in Reycob Product Import Export = 2.3.0 versions...

CVE-2026-95603

The Reycob Product Import Export plugin for WordPress, specifically versions

CVE-2025-32432

CraftCMS CVE-2025-32432 Exploit By Chirag Artani Overview This repository contains a proof-of-concept exploit script for CVE-2025-32432, a pre-authentication Remote Code Execution RCE vulnerability affecting CraftCMS versions 4.x and 5.x. The vulnerability exists in the asset transform generation...

CVE-2024-8353

本文是由EQSTLab发布的研究文章。 感谢cuokon，他发现了此漏洞。 引言 进一步分析CVE-2024-5932 EQST Insight R&TPDF文件。 https://github.com/user-attachments/assets/085c2f81-2894-4bb7-a3f5-62406dcb1021 CVE-2024-8353 ★ CVE-2024-8353 任意文件删除与RCE PoC ★ 描述 CVE-2024-8353：GiveWP PHP 对象注入漏洞 描述：givewp –...

vulnerable-bsr-lab-CVE-2023-6933

CVE-2023-6933 Vulnerability Lab Overview This laboratory environment demonstrates CVE-2023-6933, a critical PHP Object Injection vulnerability in the Better Search Replace WordPress plugin versions ≤1.4.4. Vulnerability Details CVE ID : CVE-2023-6933 CVSS Score : 9.8 Critical Affected Plugin :...