CVE ID :CVE-2026-39797 Published : Oct. 6, 2026, 8:34 a.m. | 53 minutes ago Description :Unauthenticated PHP Object Injection in GDPR Framework By Data443 <= 2.5.0 versions. Severity: 9.8 | CRITICAL Visit the link for more details, such as CVSS details, affected products, timeline,...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-39797 - WordPress GDPR Framework By Data443 plugin <= 2.5.0 - PHP Object Injection vulnerability

VERWANDTEARTIKEL

HPE iLO 7: Kritische Schwachstelle CVE-2026-79820 erlaubt Angriffe übers Netzwerk

USN-8875-1: Linux kernel vulnerabilities

CVE-2026-95105 - Cloak AES-CTR cipher lacks ciphertext authentication, allowing chosen-plaintext forgery by bit flipping

CVE-2026-105317 - WordPress Paid Member Subscriptions plugin <= 3.1.1 - SQL Injection vulnerability

CVE-2026-105070 - WordPress Salon booking system plugin <= 10.31.7 - Privilege Escalation vulnerability

CVE-2026-105058 - WordPress WP User Profiles plugin <= 2.7.3 - Privilege Escalation vulnerability