Everything SecOps Signal has reported about object injection: 5 stories, newest first. Part of our Vulnerabilities coverage.
A critical object injection vulnerability in the Greeny WordPress theme affects versions through 2.10.0, posing severe risks to unpatched sites.
A CVSS 9.8 deserialization flaw in Hogwords versions up to 1.2.7 allows object injection, exposing sites to severe remote compromise risks.
An unauthenticated object injection vulnerability in the Booklovers WordPress theme allows remote attackers to exploit deserialization flaws in versions up to 2.13.0.
A critical deserialization vulnerability in ThemeREX Tantra CMS versions up to 2.9.0 allows object injection, posing severe risks to business operations.
A critical vulnerability in Smart Casa allows object injection, posing severe risks to small businesses using versions up to 1.0.12.