Vulnerabilities (CVE)

Filtered by CWE-502
Total 3617 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2026-62021 2026-10-13 N/A 8.8 HIGH
Subscriber PHP Object Injection in Angio <= 1.1.1 versions.
CVE-2026-106606 2026-10-13 N/A 7.2 HIGH
Deserialization of Untrusted Data vulnerability in YITH YITH WooCommerce Affiliates yith-woocommerce-affiliates allows Object Injection.This issue affects YITH WooCommerce Affiliates: from n/a through 3.31.0.
CVE-2026-62086 2026-10-13 N/A 9.8 CRITICAL
Unauthenticated PHP Object Injection in Juno <= 2.25 versions.
CVE-2026-66568 2026-10-13 N/A 9.8 CRITICAL
Unauthenticated PHP Object Injection in Original <= 1.9.0 versions.
CVE-2026-42723 2026-10-13 N/A 9.8 CRITICAL
Unauthenticated PHP Object Injection in CleanSkin <= 1.5.0 versions.
CVE-2026-93942 2026-10-13 N/A 9.8 CRITICAL
Deserialization of Untrusted Data vulnerability in ThemeREX Group Dwell dwell allows Object Injection.This issue affects Dwell: from n/a through 1.16.0.
CVE-2026-93940 2026-10-13 N/A 9.8 CRITICAL
Deserialization of Untrusted Data vulnerability in ThemeREX Group Greeny greeny allows Object Injection.This issue affects Greeny: from n/a through 2.10.0.
CVE-2026-62076 2026-10-13 N/A 9.8 CRITICAL
Unauthenticated PHP Object Injection in Kalles <= 1.1.7.1 versions.
CVE-2026-105885 2026-10-13 N/A 8.8 HIGH
Deserialization of Untrusted Data vulnerability in 10Web Slider by 10Web slider-wd allows Object Injection.This issue affects Slider by 10Web: from n/a through 1.2.62.
CVE-2026-62125 2026-10-13 N/A 9.8 CRITICAL
Unauthenticated PHP Object Injection in Asia Garden <= 1.3.1 versions.
CVE-2026-62130 2026-10-13 N/A 7.2 HIGH
Shop manager PHP Object Injection in WooCommerce Multilingual & Multicurrency <= 5.5.8 versions.
CVE-2026-42718 2026-10-13 N/A 9.8 CRITICAL
Unauthenticated PHP Object Injection in Booster for WooCommerce <= 8.4.0 versions.
CVE-2026-93932 2026-10-13 N/A 9.8 CRITICAL
Deserialization of Untrusted Data vulnerability in ThemeREX Group Smart Casa smart-casa allows Object Injection.This issue affects Smart Casa: from n/a through 1.0.12.
CVE-2026-93938 2026-10-13 N/A 9.8 CRITICAL
Deserialization of Untrusted Data vulnerability in ThemeREX Group Hogwords hogwords allows Object Injection.This issue affects Hogwords: from n/a through 1.2.7.
CVE-2026-62045 2026-10-13 N/A 9.8 CRITICAL
Deserialization of Untrusted Data vulnerability in ThemeREX Group Booklovers booklovers allows Object Injection.This issue affects Booklovers: from n/a through 2.13.0.
CVE-2026-93927 2026-10-13 N/A 9.8 CRITICAL
Deserialization of Untrusted Data vulnerability in Axiomthemes Veto veto allows Object Injection.This issue affects Veto: from n/a through 1.6.0.
CVE-2026-93941 2026-10-13 N/A 9.8 CRITICAL
Deserialization of Untrusted Data vulnerability in ThemeREX Group Edema edema allows Object Injection.This issue affects Edema: from n/a through 1.2.2.2.
CVE-2026-66483 2026-10-13 N/A 9.8 CRITICAL
Unauthenticated PHP Object Injection in Education Center <= 3.6.12 versions.
CVE-2026-42719 2026-10-13 N/A 9.8 CRITICAL
Subscriber PHP Object Injection in Dynamic User Directory <= 2.4 versions.
CVE-2026-93929 2026-10-13 N/A 9.8 CRITICAL
Deserialization of Untrusted Data vulnerability in ThemeREX Group Travesia travesia allows Object Injection.This issue affects Travesia: from n/a through 1.1.16.