113755 matches found
PT-2026-133283
The Enable Media Replace WordPress plugin before 4.2.3 does not restrict the classes allowed when deserializing stored metadata during its media replace-and-update-links routine, allowing unauthenticated users to inject a PHP object that is instantiated when a user with upload access performs a...
[SECURITY] Fedora 45 Update: kdevelop-php-26.08.2-1.fc45
Php language and documentation plugins for KDevelop...
CVE-2026-6183-SQLI
SQL Injection via id Parameter in index.php - Simple Content Management System in PHP Description A SQL Injection vulnerability exists in Simple Content Management System PHP. The id parameter in index.php is not sanitized before being passed to the SQL query, allowing an unauthenticated attacker...
WordPress Gravity Forms plugin <= 3.1.2 - Unauthenticated PHP Object Injection vulnerability
Unauthenticated PHP Object Injection vulnerability discovered by Tin Pham TF1T, Hao Ngo, Trong Pham in WordPress Plugin Gravity Forms versions = 3.1.2...
PHP2Shell-PoC
BASE OF THE PoC https://raw.githubusercontent.com/BillReyor/ph...
CVE-2026-7028-SQLI
CodeAstro-Online-Job-Portal-SQLi-Delete-All Details Vendor: CodeAstro Product: Online Job Portal Project in PHP MySQL Version: 1.0 Vulnerability Type: SQL Injection CWE: CWE-89 Affected Endpoint: /admin/jobs-admins/delete-jobs.php Parameter: id GET Impact: Allows deletion of all job records in th...
CVE-2025-67436
Authenticated Remote Code Execution RCE in PluXml CMS 5.8.22 allows an attacker with administrator panel access to inject a malicious PHP webshell into a theme file e.g., home.php...
CVE-2024-7553
Incorrect validation of files loaded from a local untrusted directory may allow local privilege escalation if the underlying operating systems is Windows. This may result in the application executing arbitrary behaviour determined by the contents of untrusted files. This issue affects MongoDB...
CVE-2026-62014
Unauthenticated PHP Object Injection in EmojiNation = 1.0.12 versions...
CVE-2026-62016
Unauthenticated PHP Object Injection in Gamic = 1.19 versions...
CVE-2026-62013
Unauthenticated PHP Object Injection in Edge Decor = 2.9 versions...
CVE-2026-62015
Unauthenticated PHP Object Injection in Gamezone = 1.1.11 versions...
CVE-2026-62018
Unauthenticated PHP Object Injection in Gunslinger = 1.11 versions...
CVE-2026-62017
Unauthenticated PHP Object Injection in Good Homes = 1.3.13 versions...
CVE-2026-62131
Unauthenticated PHP Object Injection in Zoho Flow = 2.14.5 versions...
CVE-2026-62006
Unauthenticated PHP Object Injection in Nuts = 1.12 versions...
CVE-2026-62008
Unauthenticated PHP Object Injection in Orpheus = 1.8 versions...
CVE-2026-62012
Unauthenticated PHP Object Injection in Coinpress = 1.0.15 versions...