Threat database

1 threat

Threat database
Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	8.0	EPSS 0.3%	CVE-2026-104932Search Regex · Deserialization of Untrusted Data High8.0EPSS 0.3%2026-10-16CVE Database V5CVE-2026-104932 The Search Regex plugin for WordPress is vulnerable to PHP Object Injection in version 3.5 via deserialization of untrusted input in the replace_all function. This allows authenticated attackers, with subscriber-level access and above, to inject a PHP Object. The additional presence of a POP chain allows attackers to execute code. EPSS 0.3%Vulnerability johnny5 #cwe-502	CVE Database V5	2026-10-16

Showing 1–1 of 1 result