113782 matches found
CVE-2026-42701: YayCommerce YayMail: Shop manager PHP Object Injection in YayMail <= 4.4.6 versions.
Shop manager PHP Object Injection in YayMail = 4.4.6 versions...
CVE-2026-118081: 10Web 10Web Social Photo Feed: Contributor PHP Object Injection in 10Web Social Photo Feed <= 1.5.6 versions.
Contributor PHP Object Injection in 10Web Social Photo Feed = 1.5.6 versions...
10websocial deserialization injection vulnerability
Versions 1.5.6 and earlier of 10websocial contain a deserialization injection vulnerability. This vulnerability stems from PHP object injection under Contributor privileges...
WordPress Finale Lite deserialization injection vulnerability
WordPress Finale Lite versions 2.21.0 and earlier contain a deserialization injection vulnerability. This vulnerability stems from PHP object injection and could potentially be exploited by store administrators...
CVE-2026-118079: FolioVision FV Flowplayer Video Player: Shop manager PHP Object Injection in FV Flowplayer Video Player <= 8.3.4 versions.
Shop manager PHP Object Injection in FV Flowplayer Video Player = 8.3.4 versions...
buddydev BuddyPress Xprofile Custom Field Types deserialization injection vulnerability
BuddyDev BuddyPress Xprofile Custom Field Types versions 1.3.1 and earlier contain a deserialization injection vulnerability. This vulnerability allows subscribers to trigger PHP object injection...
ThemeREX Motorix deserialization injection vulnerability
ThemeREX Motorix versions 1.11 and earlier contain a deserialization injection vulnerability. This vulnerability stems from unauthenticated PHP object injection...
ThemeREX Printy deserialization injection vulnerability
ThemeREX Printy versions 1.13.0 and earlier contain a deserialization injection vulnerability. This vulnerability arises from PHP object injection when no authentication is performed...
Fast Themes Sastra Essential Addons for Elementor deserialization injection vulnerability
Fast Themes Sastra Essential Addons for Elementor versions 1.2.3 and earlier contain a deserialization injection vulnerability. This vulnerability stems from PHP object injection, which may allow attackers with author privileges to inject malicious objects and execute arbitrary code...
CVE-2026-116864: Arni Cinco WPCargo Track & Trace: Author PHP Object Injection in WPCargo Track & Trace <= 8.0.5 versions.
Author PHP Object Injection in WPCargo Track & Trace = 8.0.5 versions...
CVE-2026-116867: sosidee Dynamic QR Code – generator: Contributor PHP Object Injection in Dynamic QR Code – generator <= 1.0.1 versions.
Contributor PHP Object Injection in Dynamic QR Code – generator = 1.0.1 versions...
CVE-2026-116869: myPOS Payments myPOS Checkout: Shop manager PHP Object Injection in myPOS Checkout <= 1.4.5 versions.
Shop manager PHP Object Injection in myPOS Checkout = 1.4.5 versions...
CVE-2026-62012: ThemeREX Coinpress: Unauthenticated PHP Object Injection in Coinpress <= 1.0.15 versions.
Unauthenticated PHP Object Injection in Coinpress = 1.0.15 versions...
CVE-2026-62014: ThemeREX EmojiNation: Unauthenticated PHP Object Injection in EmojiNation <= 1.0.12 versions.
Unauthenticated PHP Object Injection in EmojiNation = 1.0.12 versions...
CVE-2026-62016: ThemeREX Gamic: Unauthenticated PHP Object Injection in Gamic <= 1.19 versions.
Unauthenticated PHP Object Injection in Gamic = 1.19 versions...
CVE-2026-62017: ThemeREX Good Homes: Unauthenticated PHP Object Injection in Good Homes <= 1.3.13 versions.
Unauthenticated PHP Object Injection in Good Homes = 1.3.13 versions...
CVE-2026-118076: Frisbii Frisbii Pay: Contributor PHP Object Injection in Frisbii Pay <= 1.8.19 versions.
Contributor PHP Object Injection in Frisbii Pay = 1.8.19 versions...
CVE-2026-118077: Fast Themes Sastra Essential Addons for Elementor: Author PHP Object Injection in Sastra Essential Addons for Elementor <= 1.2.3 versions.
Author PHP Object Injection in Sastra Essential Addons for Elementor = 1.2.3 versions...
PT-2026-132253
Shop manager PHP Object Injection in FV Flowplayer Video Player = 8.3.4 versions...
ThemeREX RexCoin deserialization injection vulnerability
ThemeREX RexCoin versions 1.2.6 and earlier contain a deserialization injection vulnerability. This vulnerability stems from unauthenticated PHP object injection...