CVE-2026-118089

The Product Feed Manager plugin for WordPress, versions

CVE-2026-118089 WordPress Product Feed Manager plugin <= 7.14.1 - PHP Object Injection vulnerability

Shop manager PHP Object Injection in Product Feed Manager = 7.14.1 versions...

EUVD-2026-114315

Shop manager PHP Object Injection in Product Feed Manager = 7.14.1 versions...

EUVD-2026-114296

Unauthenticated PHP Object Injection in LeadSnap = 1.25 versions...

CVE-2026-90888 WordPress LeadSnap plugin <= 1.25 - PHP Object Injection vulnerability

Unauthenticated PHP Object Injection in LeadSnap = 1.25 versions...

CVE-2026-90888

The LeadSnap WordPress plugin versions

EUVD-2026-114295

Contributor PHP Object Injection in GS Testimonial Slider = 3.3.10 versions...

CVE-2026-78527 WordPress GS Testimonial Slider plugin <= 3.3.10 - PHP Object Injection vulnerability

Contributor PHP Object Injection in GS Testimonial Slider = 3.3.10 versions...

CVE-2026-78527 WordPress GS Testimonial Slider plugin <= 3.3.10 - PHP Object Injection vulnerability

Contributor PHP Object Injection in GS Testimonial Slider = 3.3.10 versions...

CVE-2026-78527

The WordPress GS Testimonial Slider plugin versions

CVE-2026-73186

The Enable Media Replace plugin for WordPress versions

CVE-2026-73186 WordPress Enable Media Replace plugin <= 4.2.2 - PHP Object Injection vulnerability

Subscriber PHP Object Injection in Enable Media Replace = 4.2.2 versions...

EUVD-2026-114294

Subscriber PHP Object Injection in Enable Media Replace = 4.2.2 versions...

EUVD-2026-114288

Unauthenticated PHP Object Injection in FunnelKit Automations = 3.8.6.1 versions...

CVE-2026-39738 WordPress FunnelKit Automations plugin <= 3.8.6.1 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in Aman FunnelKit Automations wp-marketing-automations allows Object Injection.This issue affects FunnelKit Automations: from n/a through 3.8.6.1...

CVE-2026-39738

The FunnelKit Automations plugin for WordPress versions

CVE-2026-39738 WordPress FunnelKit Automations plugin <= 3.8.6.1 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in Aman FunnelKit Automations wp-marketing-automations allows Object Injection.This issue affects FunnelKit Automations: from n/a through 3.8.6.1...

CVE-2026-119526

The WordPress Royal Event theme (versions up to and including 2.0 ) is vulnerable to a PHP Object Injection vulnerability. The root cause is the deserialization of untrusted data , which could allow an attacker to inject objects. This vulnerability has a CRITICAL base severity score of 9.8 , with...

CVE-2026-119526 WordPress Royal Event theme <= 2.0 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in ThemeREX Royal Event allows Object Injection. This issue affects Royal Event: from n/a through 2.0...

Polkit-CVE-2021-4034-HLP

Polkit-CVE-2021-4034-HLP Polkit CVE-2021-4034 exploitation in High-Level Programming Language Build make LHOST=ip.or.domain.tld LPORT=8000 Usage Open TCP port listener, example with ncat on loopback ncat -vl 127.0.0.1 8000 Run exploit php $ARCHexploit.php python $ARCHexploit.py...