Threats tagged 'ghsa-fggq-3fv5-w95m'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.8	EPSS 0.6%	CVE-2026-28139Ajax Search Lite (WordPress plugin) · Deserialization of Untrusted Data Critical9.8EPSS 0.6%2026-08-06CVE Database V5CVE-2026-28139 CVE-2026-28139 is a critical vulnerability in the wpdreams Ajax Search Lite plugin, affecting versions up to and including 4.14.4. It involves unauthenticated PHP Object Injection due to deserialization of untrusted data (CWE-502). This flaw allows an attacker to execute arbitrary code remotely without any authentication. EPSS 0.6%Vulnerability wpdreams CWE-502 #ghsa-fggq-3fv5-w95m	CVE Database V5	2026-08-06

Page 1 of 1