CVE ID :CVE-2026-115968 Published : Oct. 28, 2026, 2:02 p.m. | 21 minutes ago Description :Deserialization of Untrusted Data vulnerability in Ultimate Member Ultimate Member ultimate-member allows Object Injection.This issue affects Ultimate Member: from n/a through 2.13.1. Severity: 9.8 |...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-115968 - WordPress Ultimate Member plugin <= 2.13.1 - PHP Object Injection vulnerability

VERWANDTEARTIKEL

HiRDB: Sechs kritische Schwachstellen erlauben Angriffe ohne Anmeldung

CVE-2026-65145: Kritische Lücke in NVIDIA NeMo Agent Toolkit ermöglicht Angriffe ohne Anmeldung

CVE-2026-115603 - WordPress Advanced Ads – Tracking plugin < 4.0.0 - SQL Injection vulnerability

CVE-2026-116389 - WordPress Phoenix Media Rename plugin <= 3.13.5 - PHP Object Injection vulnerability

CVE-2026-116078 - HTTP/2 request bodies made of 1-byte DATA frames amplify memory use in Bandit

CVE-2026-105420 - Path Traversal in Wing WFTP Server leading to Remote Code Execution