5577 matches found
PT-2026-109589
Name of the Vulnerable Software and Affected Versions Axiomthemes Balance versions prior to 1.12.1 Description The Axiomthemes Balance WordPress theme contains a flaw where it deserializes untrusted user-controlled data using the unserialize function. This allows for PHP object injection, where...
CVE-2026-7654
CVE-2026-7654 CVE-2026-7654 Admin Columns PHP Object Injection RCE Exploit...
CVE-2026-49085
CVE-2026-49085 CVE-2026-49085 WP Insightly PHP Object Injection Exploit...
WordPress LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes plugin <= 10.2.1 - Authenticated (Custom+) PHP Object Injection vulnerability
Authenticated Custom+ PHP Object Injection vulnerability discovered by Wordfence PRISM in WordPress Plugin LifterLMS versions = 10.2.1...
CVE-2026-94065 WordPress ColorFolio theme <= 1.3 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in BuddhaThemes ColorFolio colorit allows Object Injection.This issue affects ColorFolio: from n/a through 1.3...
CVE-2026-94064 WordPress Neo | Barber Shop WordPress Theme theme <= 3.5 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in BuddhaThemes Neo | Barber Shop WordPress Theme neocut allows Object Injection.This issue affects Neo | Barber Shop WordPress Theme: from n/a through 3.5...
CVE-2026-94064
The BuddhaThemes Neo | Barber Shop WordPress Theme (neocut) is vulnerable to PHP Object Injection due to the Deserialization of Untrusted Data (CWE-502). This vulnerability affects versions up to and including 3.5 . Successful exploitation can lead to significant impacts on confidentiality , inte...
CVE-2026-105872 WordPress Product Configurator for WooCommerce plugin <= 1.7.5 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in mklacroix Product Configurator for WooCommerce product-configurator-for-woocommerce allows Object Injection.This issue affects Product Configurator for WooCommerce: from n/a through 1.7.5...
CVE-2026-104392 WordPress Quiz And Survey Master plugin <= 11.2.7 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in ExpressTech Quiz And Survey Master quiz-master-next allows Object Injection.This issue affects Quiz And Survey Master: from n/a through 11.2.7...
CVE-2026-94568
The Pay with Vipps for WooCommerce (woo-vipps ) WordPress plugin is vulnerable to PHP Object Injection due to the deserialization of untrusted data . This flaw affects versions up to and including 6.2.0 . An attacker can exploit this vulnerability to perform object injection, potentially leading ...
WordPress Splendour theme <= 1.23 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by johska in WordPress Theme Splendour versions = 1.23...
WordPress Stargaze theme <= 1.10 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by johska in WordPress Theme Stargaze versions = 1.10...
WordPress Tipsy theme <= 1.6 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by johska in WordPress Theme Tipsy versions = 1.6...
WordPress Wine House theme <= 3.20 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by johska in WordPress Theme Wine House versions = 3.20...
WordPress Yacht Rental theme <= 2.6 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by johska in WordPress Theme Yacht Rental versions = 2.6...
WordPress Kalles theme <= 1.1.7.1 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme Kalles versions = 1.1.7.1...
WordPress Avala theme <= 1.1.4 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme Avala versions = 1.1.4...
WordPress WineShop theme <= 3.20 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by johska in WordPress Theme WineShop versions = 3.20...