Cpe:2.3:a:10web:social_photo_feed:*:*:*:*:*:*:*:* - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/cpes/cpe2.3a10websocial_photo_feed/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioThu, 29 Oct 2026 20:39:58 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svg10Web Social Photo Feed: PHP object injection (CVE-2026-118081)https://feed.craftedsignal.io/briefs/2026-10-10web-social-photo-feed-injection/Thu, 29 Oct 2026 20:39:58 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-10-10web-social-photo-feed-injection/The 10Web Social Photo Feed plugin versions 1.5.6 and earlier contain a contributor-level PHP object injection vulnerability.<p>CVE-2026-118081 identifies a PHP object injection vulnerability in 10Web Social Photo Feed versions 1.5.6 and lower. This vulnerability is accessible to users with contributor-level permissions.</p> highadvisory