tag
Unserialize
Critical
GiveWP Unauthenticated PHP Object Injection via Weak Serialized-Data Regex Check (CVE-2025-22777)
CVE-2025-22777·
GiveWP – Donation Plugin and Fundraising Platform (WordPress plugin, 100,000+ active installs)
patched
Critical
Everest Forms Unauthenticated PHP Object Injection to RCE (CVE-2026-3296)
CVE-2026-3296·
Everest Forms (WordPress plugin — Contact Form, Payment Form, Quiz, Survey & Custom Form Builder)
patched