CVE-2026-104932 - Search Regex 3.5 - Authenticated (Subscriber+) Remote Code Execution via User Meta Serialized String Corruption
CVE ID :CVE-2026-104932 Published : Oct. 16, 2026, 6:17 a.m. | 1 hour, 17 minutes ago Description :The Search Regex plugin for WordPress is vulnerable to PHP Object Injection in version 3.5 via deserialization of untrusted input in the replace_all function. This allows authenticated...