PHP Object Injection

Everything NetSec Observer has reported about PHP Object Injection: 2 stories, newest first. Part of our Vulnerabilities coverage.

Vulnerabilities

Wine House Theme PHP Object Injection: CVE-2026-62053 Grants Remote Code Execution

The National Vulnerability Database lists CVE-2026-62053 as a critical flaw affecting ThemeREX Wine House versions up to 3.20, allowing remote code execution.

Oct 11, 2026

Vulnerabilities

WineShop PHP Object Injection in v3.20 Enables Unauthenticated Code Execution with 9.8 CVSS Score

A critical vulnerability in WineShop versions up to 3.20 allows attackers to execute arbitrary code without authentication, rated 9.8 CVSS.

Oct 11, 2026