CVE ID :CVE-2026-39738 Published : Oct. 30, 2026, 7:18 p.m. | 42 minutes ago Description :Unauthenticated PHP Object Injection in FunnelKit Automations <= 3.8.6.1 versions. Severity: 9.8 | CRITICAL Visit the link for more details, such as CVSS details, affected products, timeline, and...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-39738 - WordPress FunnelKit Automations plugin <= 3.8.6.1 - PHP Object Injection vulnerability

VERWANDTEARTIKEL

CVE-2026-115829 - Secret Server partial login bypass

CVE-2026-115830 - Secret Server JWT issuance error

CVE-2026-55598 - PinePods: Authenticated SSRF via podcast RSS enclosure URL (server-side fetch of attacker-controlled URL, no host validation)

CVE-2026-90888 - WordPress LeadSnap plugin <= 1.25 - PHP Object Injection vulnerability

CVE-2026-78527 - WordPress GS Testimonial Slider plugin <= 3.3.10 - PHP Object Injection vulnerability

CVE-2026-73186 - WordPress Enable Media Replace plugin <= 4.2.2 - PHP Object Injection vulnerability