CVE-2026-118079

Deserialization of Untrusted Data vulnerability in FolioVision FV Flowplayer Video Player fv-wordpress-flowplayer allows Object Injection.This issue affects FV Flowplayer Video Player: from n/a through 7.5.56.7212...

CVE-2026-118076

Contributor PHP Object Injection in Frisbii Pay = 1.8.19 versions...

CVE-2026-118078

Shop manager PHP Object Injection in Product Catalog Feed by PixelYourSite = 3.1.4 versions...

CVE-2026-116864

Author PHP Object Injection in WPCargo Track & Trace = 8.0.5 versions...

CVE-2026-116868

Subscriber PHP Object Injection in BuddyPress Xprofile Custom Field Types = 1.3.1 versions...

CVE-2026-116865

Editor PHP Object Injection in Zippy = 1.7.0 versions...

CVE-2026-118073

Subscriber PHP Object Injection in News Kit Elementor Addons = 1.5.0 versions...

CVE-2026-116867

Contributor PHP Object Injection in Dynamic QR Code generator = 1.0.1 versions...

CVE-2026-116866

Contributor PHP Object Injection in Extra Fees Plugin for WooCommerce = 4.4.0 versions...

CVE-2026-116869

Shop manager PHP Object Injection in myPOS Checkout = 1.4.5 versions...

cve-2024-4577-lab

CVE-2024-4577 — PHP-CGI Argument Injection → RCE Docker Lab / CTF A self-contained, from-scratch Docker lab that demonstrates the real argument-injection → Remote Code Execution primitive behind CVE-2024-4577. Exploit it over http://localhost:8080, pop a shell, and read the flag from inside the...

CVE-2026-118080 WordPress Social Snap plugin <= 1.5.4 - PHP Object Injection vulnerability

Contributor PHP Object Injection in Social Snap = 1.5.4 versions...

CVE-2026-118080 WordPress Social Snap plugin <= 1.5.4 - PHP Object Injection vulnerability

Contributor PHP Object Injection in Social Snap = 1.5.4 versions...

CVE-2026-118081 WordPress 10Web Social Photo Feed plugin <= 1.5.6 - PHP Object Injection vulnerability

Contributor PHP Object Injection in 10Web Social Photo Feed = 1.5.6 versions...

EUVD-2026-112997

Contributor PHP Object Injection in Social Snap = 1.5.4 versions...

CVE-2026-118081 WordPress 10Web Social Photo Feed plugin <= 1.5.6 - PHP Object Injection vulnerability

Contributor PHP Object Injection in 10Web Social Photo Feed = 1.5.6 versions...

CVE-2026-118080

The Social Snap WordPress plugin (versions

CVE-2026-118081

The 10Web Social Photo Feed plugin for WordPress, affecting versions

EUVD-2026-112998

Contributor PHP Object Injection in 10Web Social Photo Feed = 1.5.6 versions...

CVE-2026-118079 WordPress FV Flowplayer Video Player plugin <= 7.5.56.7212 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in FolioVision FV Flowplayer Video Player fv-wordpress-flowplayer allows Object Injection.This issue affects FV Flowplayer Video Player: from n/a through 7.5.56.7212...