Vulnerabilities
WineShop PHP Object Injection in v3.20 Lets Attackers Inject Code Without Auth
A critical vulnerability in WineShop versions up to 3.20 allows unauthenticated attackers to inject PHP objects, posing a severe risk to e-commerce sites.
CWE-502
Everything SecOps Signal has reported about CWE-502: 3 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
Hogwords Deserialization Flaw: CVSS 9.8 CVE-2026-93938 Affects Versions Up to 1.2.7
A CVSS 9.8 deserialization flaw in Hogwords versions up to 1.2.7 allows object injection, exposing sites to severe remote compromise risks.
Vulnerabilities
ThemeREX Tantra CMS Deserialization Bug Exposes Businesses to Critical CVE-2026-93930 Risks
A critical deserialization vulnerability in ThemeREX Tantra CMS versions up to 2.9.0 allows object injection, posing severe risks to business operations.