park_of_ideas vulnerabilities and threats

5 threats

Severity	CVSS	Signals	Threat	Source	Published
Critical	9.8	EPSS 0.3%	CVE-2026-49108Moderno (WordPress plugin) · Deserialization of Untrusted Data Critical9.8EPSS 0.3%2026-06-17CVE Database V5CVE-2026-49108 CVE-2026-49108 is a critical vulnerability in park_of_ideas Moderno versions prior to 1.43. It involves unauthenticated PHP Object Injection due to deserialization of untrusted data (CWE-502). This vulnerability allows an attacker to execute arbitrary code without any authentication, potentially leading to full system compromise. The CVSS score is 9.8, indicating a high impact on confidentiality, integrity, and availability. EPSS 0.3%Vulnerability park_of_ideas CWE-502	CVE Database V5	2026-06-17
Critical	9.8	EPSS 0.4%	CVE-2026-25032Ricky (WordPress plugin) · Deserialization of Untrusted Data Critical9.8EPSS 0.4%2026-03-25CVE Database V5CVE-2026-25032 Deserialization of Untrusted Data vulnerability in park_of_ideas Ricky ricky allows Object Injection.This issue affects Ricky: from n/a through < 2.31. EPSS 0.4%Vulnerability park_of_ideas	CVE Database V5	2026-03-25
Critical	9.8	EPSS 0.4%	CVE-2026-25031Tasty Daily (WordPress plugin) · Deserialization of Untrusted Data Critical9.8EPSS 0.4%2026-03-25CVE Database V5CVE-2026-25031 Deserialization of Untrusted Data vulnerability in park_of_ideas Tasty Daily tastydaily allows Object Injection.This issue affects Tasty Daily: from n/a through < 1.27. EPSS 0.4%Vulnerability park_of_ideas	CVE Database V5	2026-03-25
Critical	9.8	EPSS 0.4%	CVE-2026-25030Goldish (WordPress plugin) · Deserialization of Untrusted Data Critical9.8EPSS 0.4%2026-03-25CVE Database V5CVE-2026-25030 Deserialization of Untrusted Data vulnerability in park_of_ideas Goldish goldish allows Object Injection.This issue affects Goldish: from n/a through < 3.47. EPSS 0.4%Vulnerability park_of_ideas	CVE Database V5	2026-03-25
Critical	9.8	EPSS 0.4%	CVE-2026-25029KIDZ (WordPress plugin) · Deserialization of Untrusted Data Critical9.8EPSS 0.4%2026-03-25CVE Database V5CVE-2026-25029 Deserialization of Untrusted Data vulnerability in park_of_ideas KIDZ kidz allows Object Injection.This issue affects KIDZ: from n/a through <= 5.24. EPSS 0.4%Vulnerability park_of_ideas	CVE Database V5	2026-03-25

Page 1 of 1