CVE-2026-40754: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Roisin = 1.4 versions...

CVE-2026-40739: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in LuxeDrive = 1.4 versions...

CVE-2026-40736: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Laurits = 1.5.1 versions...

CVE-2026-39578: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Valiance = 1.2 versions...

CVE-2026-39577: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Playroom = 1.4.1 versions...

CVE-2026-39567: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Santé = 1.5.1 versions...

CVE-2026-12115: Deserialization of Untrusted Data

The Counter Box – Add Countdowns, Timers & Dynamic Counters to WordPress plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.0.13 via deserialization of untrusted input . This makes it possible for authenticated attackers, with administrator-level...

CVE-2025-69127: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Plumbing = 1.6 versions...

CVE-2025-69111: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Reisen = 1.4.1 versions...

CVE-2026-54194: Deserialization of Untrusted Data

Contributor PHP Object Injection in Fusion Builder = 3.15.4 versions...

CVE-2026-40760: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Behold = 1.5 versions...

CVE-2026-40758: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Léonie = 1.2.1 versions...

CVE-2026-40753: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in EasyMeals = 1.5.1 versions...

CVE-2026-40751: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Ashtanga = 1.2 versions...

CVE-2026-39545: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Zermatt = 1.6.1 versions...

CVE-2026-39539: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Alloggio - Hotel Booking = 2.1.2 versions...

CVE-2026-39529: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Elementra = 1.0.9 versions...

CVE-2026-39446: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Kapee 1.7.0 versions...

CVE-2026-39443: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in EmallShop = 2.4.21 versions...

CVE-2026-52706: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in JetEngine = 3.8.10 versions...