TI-2026-75187 CVE-2026-104932 · GHSA-pg87-gj3v-m4jxPHP object injection in Search Regex WordPress pluginPriority LOW 37The Search Regex plugin for WordPress is vulnerable to PHP Object Injection in version 3.5 via deserialization of untrusted input in the replace_all function.CVSS 3.1HIGH 8.0· Network · Low privileges · User interaction · EPSS 0.00282 · Published 2026-10-16 · No fix listed CWE-502