Priority MEDIUM 49
Deserialization of Untrusted Data vulnerability in ThemeREX Royal Event allows Object Injection.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00408 · Published 2026-10-30 · No fix listed CWE-502
Priority MEDIUM 49
Unauthenticated PHP Object Injection in Gunslinger <= 1.11 versions.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00449 · Published 2026-10-29 · No fix listed CWE-502
Priority MEDIUM 49
Unauthenticated PHP Object Injection in Good Homes <= 1.3.13 versions.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00419 · Published 2026-10-29 · No fix listed CWE-502
Priority MEDIUM 49
Unauthenticated PHP Object Injection in Gamic <= 1.19 versions.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00396 · Published 2026-10-29 · No fix listed CWE-502
Priority MEDIUM 49
Unauthenticated PHP Object Injection in Gamezone <= 1.1.11 versions.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00396 · Published 2026-10-29 · No fix listed CWE-502
Priority MEDIUM 49
Unauthenticated PHP Object Injection in EmojiNation <= 1.0.12 versions.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00425 · Published 2026-10-29 · No fix listed CWE-502
Priority MEDIUM 49
Unauthenticated PHP Object Injection in Edge Decor <= 2.9 versions.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00449 · Published 2026-10-29 · No fix listed CWE-502
Priority MEDIUM 49
Unauthenticated PHP Object Injection in Coinpress <= 1.0.15 versions.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00419 · Published 2026-10-29 · No fix listed CWE-502
Priority MEDIUM 49
Unauthenticated PHP Object Injection in Bonbon <= 1.11 versions.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00396 · Published 2026-10-29 · No fix listed CWE-502
Priority MEDIUM 49
Unauthenticated PHP Object Injection in Avventure <= 1.1.12 versions.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00396 · Published 2026-10-29 · No fix listed CWE-502
Priority MEDIUM 49
Unauthenticated PHP Object Injection in Filmax <= 1.1.11 versions.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00425 · Published 2026-10-29 · No fix listed CWE-502
Priority MEDIUM 49
Unauthenticated PHP Object Injection in Orpheus <= 1.8 versions.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00419 · Published 2026-10-29 · No fix listed CWE-502
Priority MEDIUM 49
Unauthenticated PHP Object Injection in Nuts <= 1.12 versions.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00419 · Published 2026-10-29 · No fix listed CWE-502
Priority MEDIUM 49
Unauthenticated PHP Object Injection in Muzicon <= 1.15 versions.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00396 · Published 2026-10-29 · No fix listed CWE-502
Priority MEDIUM 49
Unauthenticated PHP Object Injection in Motorix <= 1.11 versions.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00396 · Published 2026-10-29 · No fix listed CWE-502
Priority MEDIUM 49
Unauthenticated PHP Object Injection in Mission <= 1.22 versions.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00396 · Published 2026-10-29 · No fix listed CWE-502
Priority MEDIUM 49
Unauthenticated PHP Object Injection in Meals & Wheels <= 1.1.13 versions.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00511 · Published 2026-10-29 · No fix listed CWE-502
Priority MEDIUM 49
Unauthenticated PHP Object Injection in Marcell <= 1.2.14 versions.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00476 · Published 2026-10-29 · No fix listed CWE-502
Priority MEDIUM 49
Unauthenticated PHP Object Injection in Le Truffe <= 1.1.7 versions.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00476 · Published 2026-10-29 · No fix listed CWE-502
Priority MEDIUM 49
Unauthenticated PHP Object Injection in Legal Stone <= 1.2.11 versions.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00511 · Published 2026-10-29 · No fix listed CWE-502
Priority MEDIUM 49
Unauthenticated PHP Object Injection in Ozisti <= 1.1.10 versions.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0049 · Published 2026-10-29 · No fix listed CWE-502
Priority MEDIUM 49
Unauthenticated PHP Object Injection in Preservation <= 1.15 versions.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00526 · Published 2026-10-29 · No fix listed CWE-502
Priority MEDIUM 49
Unauthenticated PHP Object Injection in Printy <= 1.13.0 versions.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0049 · Published 2026-10-29 · No fix listed CWE-502
Priority MEDIUM 49
Unauthenticated PHP Object Injection in Quirky <= 1.23 versions.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0049 · Published 2026-10-29 · No fix listed CWE-502
Priority MEDIUM 49
Unauthenticated PHP Object Injection in RexCoin <= 1.2.6 versions.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0049 · Published 2026-10-29 · No fix listed CWE-502
Load more