5600 matches found
CVE-2026-104905: Deserialization of Untrusted Data
FacturaScripts before version 2026.7 contains a PHP object injection vulnerability in WidgetSelect::processFormData that allows authenticated attackers to trigger unserialize on raw POST data without an allowedclasses filter for multiple-select fields. Attackers can submit a serialized XLSXWriter...
PT-2026-106051
FacturaScripts before version 2026.7 contains a PHP object injection vulnerability in WidgetSelect::processFormData that allows authenticated attackers to trigger unserialize on raw POST data without an allowed classes filter for multiple-select fields. Attackers can submit a serialized XLSXWrite...
WordPress Haaken theme <= 1.5 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by Denver Jackson in WordPress Theme Haaken versions = 1.5...
WordPress VK Google Job Posting Manager plugin <= 1.3.1 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin VK Google Job Posting Manager versions = 1.3.1...
WordPress WP Spell Check plugin <= 12.1 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin WP Spell Check versions = 12.1...
WordPress Simple Event Planner plugin <= 1.5.7 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Simple Event Planner versions = 1.5.7...
WordPress Sunshine Photo Cart plugin <= 3.7.1 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Sunshine Photo Cart versions = 3.7.1...
WordPress WP Ultimate Exporter plugin <= 3.0 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin WP Ultimate Exporter versions = 3.0...
WordPress Product Feed PRO for WooCommerce plugin <= 13.5.7 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Product Feed PRO for WooCommerce versions = 13.5.7...
WordPress Pay with Vipps for WooCommerce plugin <= 6.2.0 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Pay with Vipps for WooCommerce versions = 6.2.0...
WordPress Advanced Post Manager plugin <= 4.5.5 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by Peter Tang in WordPress Plugin Advanced Post Manager versions = 4.5.5...
WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.19 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by Ayukiab in WordPress Plugin Unlimited Elements For Elementor Free Widgets, Addons, Templates versions = 2.0.19...
WordPress The Events Calendar plugin <= 6.17.4 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by nakko in WordPress Plugin The Events Calendar versions = 6.17.4...
CVE-2026-97284
Contributor PHP Object Injection in Icegram = 3.1.31 versions...
CVE-2026-94390
Editor PHP Object Injection in Hide Shipping Method For WooCommerce = 1.5.4 versions...
EUVD-2026-90840
Contributor PHP Object Injection in Icegram = 3.1.31 versions...
CVE-2026-97284 WordPress Icegram plugin <= 3.1.31 - PHP Object Injection vulnerability
Contributor PHP Object Injection in Icegram = 3.1.31 versions...
CVE-2026-97284
The WordPress Icegram plugin (versions
