CVE-2026-75891 Kirki <= 6.2.5 - Authenticated (Subscriber+) PHP Object Injection to Administrator Account Takeover via 'get-single-symbol' AJAX Endpoint

The Kirki plugin for WordPress is vulnerable to Privilege Escalation via PHP Object Injection in all versions up to, and including, 6.2.5 via deserialization of untrusted input through the 'get-single-symbol' branch of the kirkipostapis AJAX dispatcher due to a missing capability check. This make...

CVE-2026-75891 Kirki <= 6.2.5 - Authenticated (Subscriber+) PHP Object Injection to Administrator Account Takeover via 'get-single-symbol' AJAX Endpoint

The Kirki plugin for WordPress is vulnerable to Privilege Escalation via PHP Object Injection in all versions up to, and including, 6.2.5 via deserialization of untrusted input through the 'get-single-symbol' branch of the kirkipostapis AJAX dispatcher due to a missing capability check. This make...

CVE-2026-75891

The Kirki plugin for WordPress is vulnerable to Privilege Escalation via PHP Object Injection in versions up to and including 6.2.5 . The root cause is the deserialization of untrusted input within the get-single-symbol branch of the kirki_post_apis() AJAX dispatcher due to a missing capability c...

php2shell-wazuh-rules

PHP2Shell detection rules for Wazuh 40 Wazuh rules for CVE-20...

CISA Confirms Active Exploitation of Two PHP2Shell Flaws Enabling Remote Code Execution

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Monday confirmed active exploitation of the recently patched PHP2Shell flaws by adding them to its Known Exploited Vulnerabilities KEV catalog. The PHP vulnerabilities, both rated 9.2 on the CVSS scoring system, facilitate...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

phpscan Checks websites and local network devices for exposur...

php2shell-8.4-analysis

php2shell-8.4-analysis A write-up and reproduction bundle for...

php2shell-kit

php2shell-kit An all-in-one testing + exploit kit for the PHP...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

PHP2Shell Research Lab v0.1 Defensive, offline PHP version as...

EUVD-2026-110508

WWBN AVideo before 29.5.0 contains a local file inclusion vulnerability that allows unauthenticated attackers to include PHP files outside the locale directory via a crafted Accept-Language header. Attackers can use overlapping traversal sequences like ....// to bypass single-pass removal in...

CVE-2026-116800

WWBN AVideo before 29.5.0 contains a local file inclusion vulnerability that allows unauthenticated attackers to include PHP files outside the locale directory via a crafted Accept-Language header. Attackers can use overlapping traversal sequences like ....// to bypass single-pass removal in...

World Wide Broadcast Network AVideo path traversal vulnerability

Versions prior to AVideo 29.5.0 of the World Wide Broadcast Network contain a path traversal vulnerability stemming from local file inclusion issues. Unauthenticated attackers can exploit this by including PHP files outside the locale directory via a specially crafted Accept-Language header, then...

CVE-2026-117514: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was identified in oretnom23 php-travel-agency-system. This issue affects some unknown processing of the file admin/customerdetail.php of the component Admin Record Pages. The manipulation of the argument costomerid/ticketid/empid/salaryid/pageid leads to sql injection. It is...

Daryll Doyle svg-sanitizer resource management error vulnerability

In Daryll Doyle’s svg-sanitizer versions from 0.5.3 up to but including 1.1.0, there is a resource management error vulnerability. This vulnerability arises because Sanitizer::sanitize repeatedly scans the entire input when stripping PHP tags. Unauthenticated attackers can upload SVGs containing...

VulnCheck KEV: CVE-2026-28039

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in TMS wpDataTables wpdatatables allows PHP Local File Inclusion.This issue affects wpDataTables: from n/a through 6.5.0.1...

VulnCheck KEV: CVE-2026-102785

Joomla Extension - yootheme.com - Unauthenticated remote code execution in YOOtheme Pro 5.0.0-5.0.52 - YOOtheme Pro’s publicly accessible image transformation handler incompletely binds normalized image operations and the output destination to its request signature. An unauthenticated remote...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: php (UTSA-2026-146120)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146120 advisory. In PHP versions 8.2. before 8.2.32, 8.3. before 8.3.32, 8.4. before 8.4.23, 8.5. before 8.5.8, the AES-WRAP-PAD algorithm implementation in OpenSSL extension contain...

TencentOS Server 2: php (TSSA-2026:1239)

The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:1239 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities:...

WordPress Rank Math SEO – AI SEO Tools to Dominate SEO Rankings plugin <= 1.0.276 - Authenticated (Contributor+) PHP Object Injection to Remote Code Execution vulnerability

Authenticated Contributor+ PHP Object Injection to Remote Code Execution vulnerability discovered by moochi in WordPress Plugin Rank Math SEO versions = 1.0.276...

PHP 8.5.11 Remote Code Execution

PHP version 8.5.11 contains an out-of-memory handling flaw that can result in remote code execution. The included proof of concept targets Apache modphp prefork deployments using multipart requests and session-state disclosure. https://packetstorm.news/download/237867...