CVE ID :CVE-2026-107436 Published : Oct. 18, 2026, 11:16 a.m. | 45 minutes ago Description :Deserialization of Untrusted Data vulnerability in WP Chill Strong Testimonials strong-testimonials allows Object Injection.This issue affects Strong Testimonials: from n/a through 3.3.12. Severity:...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-107436 - WordPress Strong Testimonials plugin <= 3.3.12 - PHP Object Injection vulnerability

VERWANDTEARTIKEL

Hackers exploit SiteGuard WAF flaw to run commands as SYSTEM, root

CVE-2026-112051 - Xinference through 4.0.1 Path Traversal via model_name in Custom Model Registration

CVE-2026-112021 - snac2 before 2.93 Heap-Based Buffer Overflow via JSON Parser _xs_json_load_lexer()

CVE-2026-112001 - ProjectSend 2.0.0 before 2.7.0 Incorrect Authorization via Users API Token Abilities

CVE-2026-112005 - WhoDB 0.104.0 before 0.135.0 Arbitrary File Read/Write via DuckDB Query Editor

CVE-2026-112006 - OpenTelemetry opentelemetry-exporter-otlp-proto-http 1.5.0 before 1.45.0 Improper Certificate Validation