The Advanced Form Integration — Connect Forms to 300+ Apps WordPress plugin up to version 2.10.2 is vulnerable to PHP Object Injection via deserialization of untrusted input. Exploitation requires an administrator to have configured at least one active NexForms integration. No direct impact occurs unless another plugin or theme with a PHP Object Injection POP chain is present, which could then enable actions like arbitrary file deletion, data retrieval, or code execution. The vulnerability affects versions up to and including 2.10.2 and has a high severity CVSS score of 8.1.
The QA Assistants – Driven by data WordPress plugin up to version 5.3.0 is vulnerable to PHP Object Injection via the 'dlevent_ver' parameter. This vulnerability arises from unsafe deserialization without class restrictions and insufficient sanitization of input parameters, enabling unauthenticated attackers to inject malicious PHP objects. Exploitation involves triggering a scheduled event that automatically runs every two minutes without authentication, potentially leading to arbitrary file writes and remote code execution.
The WPSyncSheets For Contact Form 7 – CF7 Google Sheets Connector & Save to Database plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.8.0 via the 'any non-system CF7 field (e.g., your-message)' parameter parameter. This is due to insufficient sanitization of CF7 submission field values before database storage and the absence of an allowed_classes restriction on maybe_unserialize() during admin retrieval. This makes it possible for unauthenticated attackers to execute code on the server. Successful exploitation of the remote code execution gadget chain requires that a Google Sheets access token be configured in the plugin (its primary advertised feature), as this triggers autoloading of the bundled Monolog 2.10.0 library whose classes form the exploitable gadget chain; however, the underlying PHP Object Injection occurs regardless.
CVE-2026-102739 is a deserialization vulnerability in the ESPectre Wi-Fi motion sensing platform for ESP32. Versions prior to 3.0.0-rc1 load NPZ datasets with pickle support enabled, allowing a maliciously crafted dataset to execute arbitrary code when analyzed by certain tools. This issue is fixed in version 3.0.0-rc1.
Quest Foglight for Databases baseRmiServiceExporter Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Quest Foglight for Databases. Authentication is not required to exploit this vulnerability.
The specific flaw exists within the configuration of the baseRmiServiceExporter bean. The issue results from the lack of proper validation of user-supplied data prior to deserializing it. An attacker can leverage this vulnerability to execute code in the context of SYSTEM. Was ZDI-CAN-29170.
MLflow SHAP load_explainer Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of MLflow. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the loading of SHAP explainer models. The issue results from the lack of proper validation of user-supplied data, which can result in deserialization of untrusted data. An attacker can leverage this vulnerability to execute code in the context of the current user. Was ZDI-CAN-30301.
MLflow PickleEvaluationArtifact Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of MLflow. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the parsing of pickle files. The issue results from the lack of proper validation of user-supplied data, which can result in deserialization of untrusted data. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-29513.
Deserialization of untrusted data in the report-processing code of Puppet, as used by Puppet Server, in the affected releases, allows a client that holds any CA-signed agent certificate to execute arbitrary code on the Puppet Server as its service user by submitting a report containing a crafted rich-data type via PUT request. Where the certificate authority autosigns requests without strong verification, an unauthenticated network attacker can obtain such a certificate.
Stanza is a Stanford NLP Python library for tokenization, sentence segmentation, NER, and parsing of many human languages. From 1.14.0 until 1.15.0, loading an attacker-supplied lemmatizer checkpoint can execute arbitrary code because stanza/models/lemma/trainer.py stores pos_dict as gzip-compressed pickle bytes and Trainer.load passes the decompressed stream to unrestricted pickle.loads. The outer torch.load call uses weights_only=True, but the nested bytes are treated as a primitive and are not inspected by that allowlist. The path is reachable during pipeline construction through a caller-influenced lemma_model_path, before inference begins. This issue is fixed in version 1.15.0.
The Ultra Addons for Contact Form 7 plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the _getObjAttr function in all versions up to, and including, 3.5.54. This makes it possible for unauthenticated attackers to delete arbitrary files on the server, which can easily lead to remote code execution when the right file is deleted (such as wp-config.php). This requires the PDF Generator add-on to be active and a Contact Form 7 form to be configured for PDF generation, as the WPCF7_Submission POP gadget chain relies on CF7 being present to complete the file deletion via __destruct(). Note: This vulnerability can only be exploited when the PDF generator feature is enabled.
**UNSUPPORTED WHEN ASSIGNED**
JavaNativeMessageDecoder in the MINA 3.0 codec module calls ObjectInputStream.readObject() on frame bytes with no class filter, so an
application that puts it in front of an untrusted peer is open to gadget-chain RCE.
As the 3.0.0 branch is inactive, we do not plan to release a version that fixes this issue.
Users are recommended to use the latest Apache MINA 2.2.X branch.
The PDF Invoice for WooCommerce + Drag and Drop Template Builder WordPress plugin up to version 7.1.1 is vulnerable to PHP Object Injection via the 'customer_note' parameter. This vulnerability allows unauthenticated attackers to execute arbitrary code on the server by exploiting insufficient sanitization of the customer_note field during WooCommerce checkout. The attack can be triggered through the public Store API using specific payment methods that generate an invoice and invoke the vulnerable code path.
CVE-2026-63393 is a high-severity vulnerability in OpenSearch SQL affecting versions 2.8.0.0 through 2.19.5.0 and 3.0.0.0-alpha1 through 3.6.9.0. It allows a remote authenticated user with basic read/search permissions to exploit unsafe deserialization of untrusted data via the `cursor` parameter on the `plugins/sql` endpoint, leading to arbitrary code execution on the server. The issue is fixed in versions 2.19.6.0 and 3.7.0.0.
Trail of Bits fickling versions up to 0.1.12 contain a vulnerability in the handling of pickle STACK_GLOBAL operands with dotted __qualname__ references. The vulnerability arises because fickling resolves such dotted attribute paths incorrectly, allowing an attacker to invoke a class method (optparse.Values.read_file) that executes arbitrary code when loading a crafted pickle. This flaw bypasses fickling's safety checks and is not mitigated by existing blocklists or heuristics. The optparse module is present in all current CPython 3.x versions and deprecated but not removed in Python 3.13.
Trail of Bits fickling versions up to 0.1.12 contain a protection mechanism failure where the _process_import() method trusts all callables from standard library modules not explicitly denylisted. This leads to unsafe code execution or file writes when malicious pickle payloads invoke such callables, bypassing the check_safety() gate. The flaw affects Python 3.7 through 3.12 due to reliance on module origin for trust decisions. The vendor has added the demonstrated risky modules to the denylist on the master branch but no official release patch is yet available.
CVE-2026-62848 is a deserialization vulnerability in Metalama's Visual Studio integration affecting versions from 2023.0.101-rc through 2026.1.18. The issue arises from unsafe deserialization of local named-pipe messages without restricting CLR types, allowing a same-user local process to execute arbitrary code within the Visual Studio process. The vulnerability does not escalate privileges beyond the logged-in user. Fixed in Metalama versions 2025.1.18, 2026.0.25, and 2026.1.19, and in the Metalama + PostSharp extension from 2026.1.5 onward. Retired extensions require removal or migration.