Vulnerabilities
WP Strong Testimonials Object Injection Flaw in Versions Through 3.3.12
The National Vulnerability Database rates CVE-2026-107436 as a high severity issue that allows object injection via untrusted data deserialization.
object injection
Everything NetSec Observer has reported about object injection: 3 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
itthinx Affiliates Deserialization Bug CVE-2026-108291 Hits 9.8 CVSS for Versions Up to 7.0.1
A critical deserialization vulnerability in itthinx Affiliates versions up to 7.0.1 allows object injection of untrusted data.
Vulnerabilities
Partiso Theme Untrusted Data Deserialization: Critical CVE-2026-93934 Hits Versions <= 1.1.13
The National Vulnerability Database rates CVE-2026-93934 as critical, affecting Partiso theme versions up to 1.1.13 through untrusted data deserialization.