EUVD-2026-112951

Unauthenticated PHP Object Injection in Preservation = 1.15 versions...

CVE-2026-54858 WordPress Printy theme <= 1.13.0 - PHP Object Injection vulnerability

Unauthenticated PHP Object Injection in Printy = 1.13.0 versions...

EUVD-2026-112950

Unauthenticated PHP Object Injection in Printy = 1.13.0 versions...

CVE-2026-54858 WordPress Printy theme <= 1.13.0 - PHP Object Injection vulnerability

Unauthenticated PHP Object Injection in Printy = 1.13.0 versions...

CVE-2026-54858

The Printy WordPress theme (versions

CVE-2026-54857

The WordPress Quirky theme (versions

EUVD-2026-112948

Unauthenticated PHP Object Injection in RexCoin = 1.2.6 versions...

CVE-2026-54856 WordPress RexCoin theme <= 1.2.6 - PHP Object Injection vulnerability

Unauthenticated PHP Object Injection in RexCoin = 1.2.6 versions...

CVE-2026-54857 WordPress Quirky theme <= 1.23 - PHP Object Injection vulnerability

Unauthenticated PHP Object Injection in Quirky = 1.23 versions...

CVE-2026-54857 WordPress Quirky theme <= 1.23 - PHP Object Injection vulnerability

Unauthenticated PHP Object Injection in Quirky = 1.23 versions...

EUVD-2026-112949

Unauthenticated PHP Object Injection in Quirky = 1.23 versions...

CVE-2026-54856

The WordPress RexCoin theme versions

CVE-2026-54856 WordPress RexCoin theme <= 1.2.6 - PHP Object Injection vulnerability

Unauthenticated PHP Object Injection in RexCoin = 1.2.6 versions...

EUVD-2026-112947

Shop manager PHP Object Injection in YayMail = 4.4.6 versions...

CVE-2026-42701 WordPress YayMail plugin <= 4.4.6 - PHP Object Injection vulnerability

Shop manager PHP Object Injection in YayMail = 4.4.6 versions...

CVE-2026-42701

The YayMail WordPress plugin, specifically versions

CVE-2026-42701 WordPress YayMail plugin <= 4.4.6 - PHP Object Injection vulnerability

Shop manager PHP Object Injection in YayMail = 4.4.6 versions...

CVE-2026-80069

MasterStudy LMS plugin for WordPress before 3.7.50 contains a missing authorization vulnerability that allows any authenticated user, including Subscribers, to trigger the stmlmssendtestemailajax AJAX action without capability or nonce validation. Attackers can invoke this handler directly or via...

EUVD-2026-112859

MasterStudy LMS plugin for WordPress before 3.7.50 contains a missing authorization vulnerability that allows any authenticated user, including Subscribers, to trigger the stmlmssendtestemailajax AJAX action without capability or nonce validation. Attackers can invoke this handler directly or via...

CVE-2026-80069 MasterStudy LMS WordPress Plugin < 3.7.50 Missing Authorization via stm_lms_send_test_email_ajax

MasterStudy LMS plugin for WordPress before 3.7.50 contains a missing authorization vulnerability that allows any authenticated user, including Subscribers, to trigger the stmlmssendtestemailajax AJAX action without capability or nonce validation. Attackers can invoke this handler directly or via...