Weaknesses of type CWE-502

2,257 results
CVE-2022-45077MEDIUMWordPress Betheme theme <= 26.5.1.4 - Auth. PHP Object Injection vulnerabilityEPSS 0.6%CVE-2020-37071CRITICALCraftCMS 3 vCard Plugin 1.0.0 - Remote Code ExecutionEPSS 0.6%CVE-2025-8227MEDIUMyanyutao0402 ChanCMS getArticle deserializationEPSS 0.6%CVE-2022-33947MEDIUMBIG-IP DNS TMUI Vulnerability CVE-2022-33947EPSS 0.6%CVE-2024-13787CRITICALVEDA - MultiPurpose WordPress Theme <= 4.2 - Authenticated (Subscriber+) PHP Object InjectionEPSS 0.6%CVE-2026-27303CRITICALAdobe Connect | Deserialization of Untrusted Data (CWE-502)EPSS 0.6%CVE-2024-7434HIGHUltraPress <= 1.2.2 - Authenticated (Contributor+) PHP Object InjectionEPSS 0.6%CVE-2023-27459HIGHWordPress User Registration plugin <= 2.3.2.1 - Authenticated PHP Object Injection vulnerabilityEPSS 0.6%CVE-2025-34153CRITICALHyland OnBase < 17.0.2.87 .NET Remoting TCP Channel Unauthenticated RCEEPSS 0.6%CVE-2025-1556MEDIUMwestboy CicadasCMS Template Management system deserializationEPSS 0.6%CVE-2024-26289CRITICALRemote Code Inclusion Vulnerability in Multiple PMB VersionsEPSS 0.6%CVE-2024-30222HIGHWordPress ARMember plugin <= 4.0.26 - PHP Object Injection vulnerabilityEPSS 0.6%CVE-2025-27301HIGHWordPress NHR Options Table Manager Plugin <= 1.1.2 - Deserialization of untrusted data vulnerabilityEPSS 0.6%CVE-2024-6943MEDIUMZhongBangKeJi CRMEB CopyTaobaoServices.php downloadImage deserializationEPSS 0.6%CVE-2025-27300HIGHWordPress ADFO plugin <= 1.9.1 - Deserialization of untrusted data vulnerabilityEPSS 0.6%CVE-2024-7432HIGHUnseen Blog <= 1.0.0 - Authenticated (Contributor+) PHP Object InjectionEPSS 0.6%CVE-2024-7433HIGHEmpowerment <= 1.0.2 - Authenticated (Contributor+) PHP Object InjectionEPSS 0.6%CVE-2024-10587HIGHFunnelforms Free <= 3.7.5.1 - Authenticated (Contributor+) PHP Object InjectionEPSS 0.6%CVE-2026-3452HIGHConcrete CMS below 9.4.8 is vulnerable to stored deserialization leading to RCE in the Express Entry List block.EPSS 0.6%CVE-2025-26763CRITICALWordPress Slider, Gallery, and Carousel by MetaSlider – Image Slider, Video Slider Plugin <= 3.94.0 - PHP Object Injection vulnerabilityEPSS 0.6%