PHP Object Injection

Critical TYPO3 Extension Exploit: Content Element Selector Flaw (CVE-2026-46725) Triggers Unauthenticated RCE

• Vulnerability Report

Critical TYPO3 Extension Exploit: Content Element Selector Flaw (CVE-2026-46725) Triggers Unauthenticated RCE

Do Son May 25, 2026 0

The TYPO3 project has announced a critical security vulnerability affecting a popular third-party extension. The advisory, tagged...

Read More Read more about Critical TYPO3 Extension Exploit: Content Element Selector Flaw (CVE-2026-46725) Triggers Unauthenticated RCE

100,000+ Sites Exposed: Critical 9.8 CVSS Flaw Hits Everest Forms WordPress Plugin

• Vulnerability Report

100,000+ Sites Exposed: Critical 9.8 CVSS Flaw Hits Everest Forms WordPress Plugin

Do Son April 9, 2026 0

Everest Forms, a popular WordPress plugin trusted by over 100,000 websites for building everything from simple contact...

Read More Read more about 100,000+ Sites Exposed: Critical 9.8 CVSS Flaw Hits Everest Forms WordPress Plugin

Critical WordPress Plugin Flaw (CVE-2025-7384, CVSS 9.8) Exposes 70,000+ Sites to RCE and Data Loss

• Vulnerability Report

Critical WordPress Plugin Flaw (CVE-2025-7384, CVSS 9.8) Exposes 70,000+ Sites to RCE and Data Loss

Do Son August 14, 2025 0

A critical security vulnerability has been disclosed in the widely used Database for Contact Form 7, WPforms,...

Read More Read more about Critical WordPress Plugin Flaw (CVE-2025-7384, CVSS 9.8) Exposes 70,000+ Sites to RCE and Data Loss

CVE-2025-52709: Critical PHP Object Injection Flaw in Everest Forms Plugin Affects 100,000+ Sites

• Vulnerability Report

CVE-2025-52709: Critical PHP Object Injection Flaw in Everest Forms Plugin Affects 100,000+ Sites

Do Son August 7, 2025 0

A critical security vulnerability has been discovered in the Everest Forms plugin, a widely used WordPress plugin...

Read More Read more about CVE-2025-52709: Critical PHP Object Injection Flaw in Everest Forms Plugin Affects 100,000+ Sites

Legacy vBulletin 4.x Patch Backfires: RCE via Signed Base64 Payloads and a Full PoC

• Vulnerability

Legacy vBulletin 4.x Patch Backfires: RCE via Signed Base64 Payloads and a Full PoC

Do Son June 7, 2025 0

Security researcher Egidio Romano (EgiX) uncovers a fascinating PHP Object Injection (POI) vulnerability in legacy versions of...

Read More Read more about Legacy vBulletin 4.x Patch Backfires: RCE via Signed Base64 Payloads and a Full PoC

CVE-2025-49113: Roundcube RCE Exploit Unveiled—The Swiss Army Knife of Webmail Just Got a Weaponized Blade

• Vulnerability Report

CVE-2025-49113: Roundcube RCE Exploit Unveiled—The Swiss Army Knife of Webmail Just Got a Weaponized Blade

Do Son June 5, 2025 0

In a stunningly fast-moving sequence of events, a serious vulnerability in the widely-used Roundcube webmail client—CVE-2025-49113—has been...

Read More Read more about CVE-2025-49113: Roundcube RCE Exploit Unveiled—The Swiss Army Knife of Webmail Just Got a Weaponized Blade

Critical Vulnerability in Everest Forms Plugin Threatens WordPress Sites

• Vulnerability

Critical Vulnerability in Everest Forms Plugin Threatens WordPress Sites

Do Son April 12, 2025 0

A critical security vulnerability has been discovered in the Everest Forms WordPress plugin, putting over 100,000 websites...

Read More Read more about Critical Vulnerability in Everest Forms Plugin Threatens WordPress Sites

Bitdefender GravityZone Console Hit by Critical PHP Deserialization Vulnerability

• Vulnerability

Bitdefender GravityZone Console Hit by Critical PHP Deserialization Vulnerability

Do Son April 7, 2025 0

A critical-severity vulnerability has been discovered in the Bitdefender GravityZone Console, posing a significant risk to affected...

Read More Read more about Bitdefender GravityZone Console Hit by Critical PHP Deserialization Vulnerability

CVE-2024-10957 Exposes Over 3 Million WordPress Sites to Unauthenticated PHP Object Injection Exploits

• Vulnerability

CVE-2024-10957 Exposes Over 3 Million WordPress Sites to Unauthenticated PHP Object Injection Exploits

Do Son January 4, 2025 0

A newly discovered vulnerability in the UpdraftPlus Backup & Migration Plugin, used by over 3 million WordPress...

Read More Read more about CVE-2024-10957 Exposes Over 3 Million WordPress Sites to Unauthenticated PHP Object Injection Exploits

Critical WordPress Vulnerability Patched: Remote Code Execution Possible

• Vulnerability

Critical WordPress Vulnerability Patched: Remote Code Execution Possible

Do Son December 6, 2023 0

A critical security vulnerability patched in the recent WordPress 6.4.2 update could have allowed attackers to take...

Read More Read more about Critical WordPress Vulnerability Patched: Remote Code Execution Possible