Unauthenticated PHP Object Injection in Le Truffe <= 1.1.7 versions.
CVE-2026-61998
Unauthenticated PHP Object Injection in Le Truffe <= 1.1.7 versions.
#cwe-502
共收录 943 条相关情报。
← 返回所有主题Unauthenticated PHP Object Injection in Legal Stone <= 1.2.11 versions.
CVE-2026-61997
Unauthenticated PHP Object Injection in Legal Stone <= 1.2.11 versions.
Unauthenticated PHP Object Injection in GEO my WordPress <= 4.5.5.3 versions.
CVE-2026-61992
Unauthenticated PHP Object Injection in GEO my WordPress <= 4.5.5.3 versions.
Unauthenticated PHP Object Injection in Ozisti <= 1.1.10 versions.
CVE-2026-54860
Unauthenticated PHP Object Injection in Ozisti <= 1.1.10 versions.
Unauthenticated PHP Object Injection in Preservation <= 1.15 versions.
CVE-2026-54859
Unauthenticated PHP Object Injection in Preservation <= 1.15 versions.
Unauthenticated PHP Object Injection in Printy <= 1.13.0 versions.
CVE-2026-54858
Unauthenticated PHP Object Injection in Printy <= 1.13.0 versions.
Unauthenticated PHP Object Injection in Quirky <= 1.23 versions.
CVE-2026-54857
Unauthenticated PHP Object Injection in Quirky <= 1.23 versions.
Unauthenticated PHP Object Injection in RexCoin <= 1.2.6 versions.
CVE-2026-54856
Unauthenticated PHP Object Injection in RexCoin <= 1.2.6 versions.
Shop manager PHP Object Injection in YayMail <= 4.4.6 versions.
CVE-2026-42701
Shop manager PHP Object Injection in YayMail <= 4.4.6 versions.
Crawl4AI from 0.9.0 before 0.9.5 fails to filter the CosineStrategy model_name field in untrusted Docker API request bodies, allowing authenticated clients to choose which Huggi...
CVE-2026-119120
Crawl4AI from 0.9.0 before 0.9.5 fails to filter the CosineStrategy model_name field in untrusted Docker API request bod
Contributor PHP Object Injection in 10Web Social Photo Feed <= 1.5.6 versions.
CVE-2026-118081
Contributor PHP Object Injection in 10Web Social Photo Feed <= 1.5.6 versions.
Contributor PHP Object Injection in Social Snap <= 1.5.4 versions.
CVE-2026-118080
Contributor PHP Object Injection in Social Snap <= 1.5.4 versions.
Shop manager PHP Object Injection in FV Flowplayer Video Player <= 8.3.4 versions.
CVE-2026-118079
Shop manager PHP Object Injection in FV Flowplayer Video Player <= 8.3.4 versions.
Shop manager PHP Object Injection in Product Catalog Feed by PixelYourSite <= 3.1.4 versions.
CVE-2026-118078
Shop manager PHP Object Injection in Product Catalog Feed by PixelYourSite <= 3.1.4 versions.
Author PHP Object Injection in Sastra Essential Addons for Elementor <= 1.2.3 versions.
CVE-2026-118077
Author PHP Object Injection in Sastra Essential Addons for Elementor <= 1.2.3 versions.
Contributor PHP Object Injection in Frisbii Pay <= 1.8.19 versions.
CVE-2026-118076
Contributor PHP Object Injection in Frisbii Pay <= 1.8.19 versions.
Contributor PHP Object Injection in WP Media folders <= 1.1.10 versions.
CVE-2026-118075
Contributor PHP Object Injection in WP Media folders <= 1.1.10 versions.
Shop manager PHP Object Injection in Finale Lite <= 2.21.0 versions.
CVE-2026-118074
Shop manager PHP Object Injection in Finale Lite <= 2.21.0 versions.
Subscriber PHP Object Injection in News Kit Elementor Addons <= 1.5.0 versions.
CVE-2026-118073
Subscriber PHP Object Injection in News Kit Elementor Addons <= 1.5.0 versions.
Shop manager PHP Object Injection in myPOS Checkout <= 1.4.5 versions.
CVE-2026-116869
Shop manager PHP Object Injection in myPOS Checkout <= 1.4.5 versions.