Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High8.8Deserialization of Untrusted Data vulnerability in magepeopleteam Booking and Rental Manager booking-and-rental-manager-for-woocommerce allows Object Injection.This is…Feb 20, 2026
- Critical9.8Deserialization of Untrusted Data vulnerability in ThemeGoods PhotoMe photome allows Object Injection.This issue affects PhotoMe: from n/a through <= 5.6.11.Feb 20, 2026
- High8.8Deserialization of Untrusted Data vulnerability in fuelthemes PeakShops peakshops allows Object Injection.This issue affects PeakShops: from n/a through <= 1.5.9.Feb 20, 2026
- High8.8Deserialization of Untrusted Data vulnerability in Kleor Contact Manager contact-manager allows Object Injection.This issue affects Contact Manager: from n/a through <= 9.1.1.Feb 20, 2026
- Critical9.8Deserialization of Untrusted Data vulnerability in BoldThemes Ippsum ippsum allows Object Injection.This issue affects Ippsum: from n/a through <= 1.2.0.Feb 20, 2026
- High8.8Deserialization of Untrusted Data vulnerability in modeltheme ModelTheme Addons for WPBakery and Elementor modeltheme-addons-for-wpbakery allows Object Injection.This…Feb 20, 2026
- High8.8Deserialization of Untrusted Data vulnerability in A WP Life Modal Popup Box modal-popup-box allows Object Injection.This issue affects Modal Popup Box: from n/a through <= 1.6.1.Feb 20, 2026
- Critical9.8Deserialization of Untrusted Data vulnerability in BoldThemes Travelicious travelicious allows Object Injection.This issue affects Travelicious: from n/a through < 1.6.7.Feb 20, 2026
- Critical9.8Deserialization of Untrusted Data vulnerability in BoldThemes Nestin nestin allows Object Injection.This issue affects Nestin: from n/a through < 1.2.6.Feb 20, 2026
- Critical9.8Deserialization of Untrusted Data vulnerability in LoftOcean PatioTime patiotime allows Object Injection.This issue affects PatioTime: from n/a through < 2.1.Feb 20, 2026
- Critical9.8SolarWinds Web Help Desk Deserialization of Untrusted Data VulnerabilityKEVEPSS 84.2%Jan 28, 2026
- Critical9.8Microsoft SharePoint Deserialization of Untrusted Data VulnerabilityKEVEPSS 29.2%Jan 13, 2026
- Low2.1A security vulnerability has been detected in milvus up to 2.6.7.EPSS 0.4%Jan 5, 2026
- Low2.0A vulnerability was determined in PluXml up to 5.8.22.EPSS 0.5%Jan 2, 2026
- Critical9.8MooreThreads torch_musa through all versions contains an unsafe deserialization vulnerability in torch_musa.utils.compare_tool.EPSS 0.7%Dec 15, 2025
- Critical10.0Barracuda Service Center, as implemented in the RMM solution, in versions prior to 2025.1.1, exposes a .NET Remoting service that is insufficiently protected against d…EPSS 0.7%Dec 10, 2025
- High8.8Ladybug adds message-based debugging, unit, system, and regression testing to Java applications.EPSS 0.3%Dec 9, 2025
- Critical10.0Meta React Server Components Remote Code Execution VulnerabilityKEVEPSS 99.8%Dec 3, 2025
- Critical9.8Microsoft Windows Server Update Service (WSUS) Deserialization of Untrusted Data VulnerabilityKEVEPSS 100.0%Oct 14, 2025
- Critical9.8SolarWinds Web Help Desk Deserialization of Untrusted Data VulnerabilityKEVEPSS 89.5%Sep 22, 2025
- Critical9.8Fortra GoAnywhere MFT Deserialization of Untrusted Data VulnerabilityKEVEPSS 99.8%Sep 18, 2025
- Critical9.0Sitecore Multiple Products Deserialization of Untrusted Data VulnerabilityKEVEPSS 60.6%Sep 3, 2025
- Critical9.4N-able N-Central Insecure Deserialization VulnerabilityKEVEPSS 1.9%Aug 13, 2025
- Critical9.8Microsoft SharePoint Deserialization of Untrusted Data VulnerabilityKEVEPSS 100.0%Jul 19, 2025
- Critical9.0Dassault Systèmes DELMIA Apriso Deserialization of Untrusted Data VulnerabilityKEVEPSS 96.9%Jun 2, 2025