high
advisory
Dynamic QR Code - generator: PHP object injection (CVE-2026-116867)
A contributor PHP object injection vulnerability exists in the Dynamic QR Code - generator WordPress plugin, affecting versions 1.0.1 and earlier.
CVE search metadata
CVE search record: CVE-2026-116867. Severity: high. CVSS: 8.8. KEV: no. Product: Dynamic QR Code - generator (<= 1.0.1). Brief: Dynamic QR Code - generator: PHP object injection (CVE-2026-116867). Brief link: https://feed.craftedsignal.io/briefs/2026-10-dynamic-qr-code-injection/
Triage facts
Revision 1- Applicability
- Dynamic QR Code - generator (<= 1.0.1)
- Evidence
- Unknown
- Severity
- High
- Sources
- 1 public source
- Freshness
- Revision 1Oct 29, 18:43 UTC
- Vulnerabilities
- 1 CVE
- Source quality
- A1Likely
CVE-2026-116867 identifies a contributor PHP object injection vulnerability in the Dynamic QR Code - generator plugin for WordPress, affecting all versions up to and including 1.0.1.