Boletines de Vulnerabilidades

CVE-2026-1542

   
Software afectado WORDPRESS
 
The Super Stage WP WordPress plugin through 1.0.1 unserializes user input via REQUEST, which could allow unauthenticated users to perform PHP Object Injection when a suitable gadget is present on the blog.

Link:

https://nvd.nist.gov/vuln/detail/CVE-2026-1542