Tag

Php-Deserialization

1 brief RSS

CVE-2026-104736: PHP Object Injection in LearnPress WordPress Plugin

The LearnPress plugin for WordPress is vulnerable to unauthenticated PHP Object Injection via the 'checkout-email' parameter, allowing remote attackers to trigger insecure deserialization.

LearnPress web-vulnerability php-deserialization wordpress cve-2026-104736

1r 2t 1c 1h ago