5578 matches found
CVE-2026-42718
The Booster for WooCommerce WordPress plugin (versions
CVE-2026-42716
The Payever - WooCommerce Gateway plugin for WordPress (versions
CVE-2026-42716 WordPress Payever - WooCommerce Gateway plugin <= 4.8.2 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Payever - WooCommerce Gateway = 4.8.2 versions...
EUVD-2026-96448
Unauthenticated PHP Object Injection in Payever - WooCommerce Gateway = 4.8.2 versions...
HTTP-Request-for-PHP-object-injection-attack-on-CVE-2023-41892
This type of attack attempts to exploit the PHP application's deserialization process to execute arbitrary code or carry out unintended actions on the server. Mitigation Strategies To defend against PHP object injection and similar attacks, consider the following strategies: Disable PHP Object...
CVE-2026-62044 WordPress Super Video Player plugin <= 1.8.13 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in bPlugins Super Video Player super-video-player allows Object Injection.This issue affects Super Video Player: from n/a through 1.8.13...
CVE-2026-62044
The bPlugins Super Video Player WordPress plugin (versions ≤ 1.8.13 ) is vulnerable to a PHP Object Injection flaw. This issue stems from the Deserialization of Untrusted Data , which can allow an attacker to inject objects into the application. The impact includes high levels of risk to confiden...
CVE-2024-52430
CVE-2024-52430 Lis Video Gallery = 0.2.1 - Unauthenticated PHP Object Injection Description The Lis Video Gallery plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 0.2.1 via deserialization of untrusted input. This makes it possible for unauthenticated...
CVE-2026-94676
The Tainacan Community Tainacan WordPress plugin is vulnerable to PHP Object Injection due to the deserialization of untrusted data . This vulnerability affects versions from n/a through 1.3.0 . An attacker could potentially exploit this to perform unauthorized actions. No specific exploit links ...
CVE-2026-105885 WordPress Slider by 10Web plugin <= 1.2.62 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in 10Web Slider by 10Web slider-wd allows Object Injection.This issue affects Slider by 10Web: from n/a through 1.2.62...
CVE-2024-50507
CVE-2024-50507 DS.DownloadList = 1.3 - Unauthenticated PHP Object Injection Description The DS.DownloadList plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.3 via deserialization of untrusted input. This makes it possible for unauthenticated...
CVE-2024-56058
CVE-2024-56058 VRPConnector = 2.0.1 - Unauthenticated PHP Object Injection Description The VRPConnector plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 2.0.1 via deserialization of untrusted input. This makes it possible for unauthenticated attackers t...
CVE-2026-12626
The Online Scheduling and Appointment Booking System – Bookly plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 28.2 via deserialization of untrusted input via the ‘value’ parameter. This makes it possible for authenticated attackers, with custom-lev...
CVE-2026-62045 WordPress Booklovers theme <= 2.13.0 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in ThemeREX Group Booklovers booklovers allows Object Injection.This issue affects Booklovers: from n/a through 2.13.0...
CVE-2026-62045
The Booklovers WordPress theme (versions
CVE-2026-93943 WordPress Convex theme <= 1.16.0 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in ThemeREX Group Convex convex allows Object Injection.This issue affects Convex: from n/a through 1.16.0...
CVE-2026-93945 WordPress Balance theme <= 1.12.0 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in Axiomthemes Balance balance allows Object Injection.This issue affects Balance: from n/a through 1.12.0...
CVE-2026-62046 WordPress Gutentype theme <= 2.1.12 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in ThemeREX Group Gutentype gutentype allows Object Injection.This issue affects Gutentype: from n/a through 2.1.12...
CVE-2026-93943
The Convex WordPress theme by ThemeREX Group, versions up to and including 1.16.0 , is vulnerable to a PHP Object Injection flaw. This issue stems from the deserialization of untrusted data , which can allow an attacker to execute arbitrary code or perform unauthorized actions. The vulnerability ...