Meals & Wheels (<= 1.1.13) - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/products/meals--wheels--1.1.13/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioThu, 29 Oct 2026 17:40:46 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgMeals & Wheels: PHP object injection vulnerability (CVE-2026-62002)https://feed.craftedsignal.io/briefs/2026-10-meals-wheels-php-injection/Thu, 29 Oct 2026 17:40:46 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-10-meals-wheels-php-injection/Meals & Wheels versions 1.1.13 and earlier are vulnerable to unauthenticated PHP object injection.<p>Meals &amp; Wheels versions 1.1.13 and earlier contain an unauthenticated PHP object injection vulnerability (CVE-2026-62002). The CVSS v3.1 base score for this vulnerability is 9.8.</p> criticaladvisory