Threats tagged 'ghsa-5953-j744-chvm'

CVE-2026-16297 is a vulnerability in the Clearfy Cache WordPress plugin before version 2.4.3. It involves unsafe deserialization of untrusted data during settings import, allowing administrator users to perform PHP Object Injection attacks. This may lead to remote code execution if a suitable gadget chain exists in the environment. The vulnerability has a medium severity rating with a CVSS score of 4.1.