CVE ID :CVE-2026-104736 Published : Oct. 17, 2026, 4:16 a.m. | 1 hour, 17 minutes ago Description :The LearnPress plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 4.4.10 via deserialization of untrusted input from the 'checkout-email' request...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-104736 - LearnPress <= 4.4.10 - Unauthenticated PHP Object Injection via 'checkout-email' Parameter

VERWANDTEARTIKEL

Hackers Exploit Critical Collabora Online Flaw to Backdoor Nextcloud Servers

CVE-2026-92798 - User Registration & Membership <= 5.2.8 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via Referer Header via 'referrer_url' Smart Tag

CVE-2026-110653 - Appointment Booking Plugin <= 5.7.4 - Unauthenticated Authentication Bypass via Race Condition on OTP Attempts Counter

CVE-2026-111853 - Tektronix 3 Series MDO OS Command Injection Vulnerability

CVE-2026-111854 - Tektronix 3 Series MDO Path Traversal Vulnerability

CVE-2026-111823 - Mage OSS OAuth Authentication Bypass Vulnerability