CVE-2026-65571

Unauthenticated PHP Object Injection in 69 Clothing = 1.2.11.1 versions...

CVE-2026-65571

Summary: CVE-2026-65571 describes an unauthenticated PHP Object Injection in WordPress 69 Clothing theme, versions

CVE-2026-65571 WordPress 69 Clothing theme <= 1.2.11.1 - PHP Object Injection vulnerability

Unauthenticated PHP Object Injection in 69 Clothing = 1.2.11.1 versions...

EUVD-2026-53983

Unauthenticated PHP Object Injection in WPBruiser no- Captcha anti-Spam = 3.1.43 versions...

CVE-2026-65556 WordPress WPBruiser {no- Captcha anti-Spam} plugin <= 3.1.43 - PHP Object Injection vulnerability

Unauthenticated PHP Object Injection in WPBruiser no- Captcha anti-Spam = 3.1.43 versions...

CVE-2026-65556

Unauthenticated PHP Object Injection in WPBruiser no- Captcha anti-Spam = 3.1.43 versions...

CVE-2026-65556 WordPress WPBruiser {no- Captcha anti-Spam} plugin <= 3.1.43 - PHP Object Injection vulnerability

Unauthenticated PHP Object Injection in WPBruiser no- Captcha anti-Spam = 3.1.43 versions...

CVE-2026-65552

Subscriber PHP Object Injection in Export User Data = 2.2.6 versions...

CVE-2026-65549 WordPress Jeg Elementor Kit plugin <= 3.2.10 - PHP Object Injection vulnerability

Author PHP Object Injection in Jeg Kit for Elementor = 3.2.10 versions...

WordPress AI ANN theme <= 1.29.0 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme AI ANN versions = 1.29.0...

WordPress Agricola theme <= 1.21.0 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Bonds in WordPress Theme Agricola versions = 1.21.0...

WordPress Agora theme <= 1.9 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Bonds in WordPress Theme Agora versions = 1.9...

WordPress Advice theme <= 1.18.0 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Bonds in WordPress Theme Advice versions = 1.18.0...

WordPress Abogado theme <= 1.18 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Bonds in WordPress Theme Abogado versions = 1.18...

Command Injection

Overview Affected versions of this package are vulnerable to Command Injection via filename handling in the Gitblame, Hgblame, and Svnblame report generators. An attacker can execute arbitrary shell commands by supplying an untrusted file whose name contains shell metacharacters. When...

EUVD-2026-53825

A security vulnerability has been detected in SourceCodester Computer Repair Shop Management System 1.0. Affected by this issue is some unknown functionality of the file /classes/Master.php?f=deleteproduct. Such manipulation of the argument ID leads to sql injection. It is possible to launch the...

CVE-2026-19021 SourceCodester Computer Repair Shop Management System Master.php delete_product sql injection

A security vulnerability has been detected in SourceCodester Computer Repair Shop Management System 1.0. Affected by this issue is some unknown functionality of the file /classes/Master.php?f=deleteproduct. Such manipulation of the argument ID leads to sql injection. It is possible to launch the...

PT-2026-68567

Name of the Vulnerable Software and Affected Versions Agora versions prior to 2.0 Description The Agora Event & Conference WordPress Theme is susceptible to PHP Object Injection due to the deserialization of untrusted input. This allows unauthenticated attackers to inject a PHP Object. While no P...

PT-2026-68564

Name of the Vulnerable Software and Affected Versions Accalia versions prior to 1.5.4 Description This issue involves PHP Object Injection caused by the deserialization of untrusted input. An unauthenticated attacker can inject a PHP Object into the system. While no POP chain a sequence of gadget...

PT-2026-68562

Name of the Vulnerable Software and Affected Versions Abelle versions prior to 1.23 Description The Abelle theme for WordPress allows unauthenticated attackers to perform PHP Object Injection through the deserialization of untrusted input. Deserialization is the process of converting a stored dat...