113755 matches found
WordPress Extra Fees Plugin for WooCommerce deserialization injection vulnerability
WordPress Extra Fees Plugin for WooCommerce versions 4.4.0 and earlier contain a deserialization injection vulnerability, which stems from PHP object injection...
ThemeREX EmojiNation deserialization injection vulnerability
ThemeREX EmojiNation versions 1.0.12 and earlier contain a deserialization injection vulnerability. This vulnerability stems from unauthenticated PHP object injection...
ThemeREX Nuts deserialization injection vulnerability
ThemeREX Nuts versions 1.12 and earlier contain a deserialization injection vulnerability. This vulnerability stems from unauthenticated PHP object injection...
WordPress Finale Lite deserialization injection vulnerability
WordPress Finale Lite versions 2.21.0 and earlier contain a deserialization injection vulnerability. This vulnerability stems from PHP object injection and could potentially be exploited by store administrators...
ThemeREX RexCoin deserialization injection vulnerability
ThemeREX RexCoin versions 1.2.6 and earlier contain a deserialization injection vulnerability. This vulnerability stems from unauthenticated PHP object injection...
WordPress WPCargo Track & Trace deserialization injection vulnerability
WordPress WPCargo Track & Trace versions 8.0.5 and earlier contain a deserialization injection vulnerability, which stems from PHP object injection...
ThemeREX Mission deserialization injection vulnerability
ThemeREX Mission versions 1.22 and earlier contain a deserialization injection vulnerability. This vulnerability stems from unauthenticated PHP object injection...
ThemeREX Printy deserialization injection vulnerability
ThemeREX Printy versions 1.13.0 and earlier contain a deserialization injection vulnerability. This vulnerability arises from PHP object injection when no authentication is performed...
ThemeREX Good Homes deserialization injection vulnerability
ThemeREX Good Homes versions 1.3.13 and earlier contain a deserialization injection vulnerability. This vulnerability stems from unauthenticated PHP object injection...
ThemeREX Gamic deserialization injection vulnerability
ThemeREX Gamic versions 1.19 and earlier contain a deserialization injection vulnerability. This vulnerability stems from unauthenticated PHP object injection...
ThemeREX Bonbon deserialization injection vulnerability
ThemeREX Bonbon versions 1.11 and earlier contain a deserialization injection vulnerability. This vulnerability stems from unauthenticated PHP object injection...
ThemeREX Muzicon deserialization injection vulnerability
ThemeREX Muzicon versions 1.15 and earlier contain a deserialization injection vulnerability. This vulnerability stems from unauthenticated PHP object injection...
ThemeREX Motorix deserialization injection vulnerability
ThemeREX Motorix versions 1.11 and earlier contain a deserialization injection vulnerability. This vulnerability stems from unauthenticated PHP object injection...
Fast Themes Sastra Essential Addons for Elementor deserialization injection vulnerability
Fast Themes Sastra Essential Addons for Elementor versions 1.2.3 and earlier contain a deserialization injection vulnerability. This vulnerability stems from PHP object injection, which may allow attackers with author privileges to inject malicious objects and execute arbitrary code...
10websocial deserialization injection vulnerability
Versions 1.5.6 and earlier of 10websocial contain a deserialization injection vulnerability. This vulnerability stems from PHP object injection under Contributor privileges...
buddydev BuddyPress Xprofile Custom Field Types deserialization injection vulnerability
BuddyDev BuddyPress Xprofile Custom Field Types versions 1.3.1 and earlier contain a deserialization injection vulnerability. This vulnerability allows subscribers to trigger PHP object injection...
CVE-2026-116864: Arni Cinco WPCargo Track & Trace: Author PHP Object Injection in WPCargo Track & Trace <= 8.0.5 versions.
Author PHP Object Injection in WPCargo Track & Trace = 8.0.5 versions...
CVE-2026-116867: sosidee Dynamic QR Code – generator: Contributor PHP Object Injection in Dynamic QR Code – generator <= 1.0.1 versions.
Contributor PHP Object Injection in Dynamic QR Code – generator = 1.0.1 versions...
CVE-2026-116869: myPOS Payments myPOS Checkout: Shop manager PHP Object Injection in myPOS Checkout <= 1.4.5 versions.
Shop manager PHP Object Injection in myPOS Checkout = 1.4.5 versions...