{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/vendors/gs-plugins/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:gs_plugins:gs_pins_for_pinterest:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":8.8,"id":"CVE-2026-110370"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["GS Pins for Pinterest (n/a through 1.9.2)"],"_cs_severities":["high"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["GS Plugins"],"content_html":"\u003cp\u003eCVE-2026-110370 identifies a Deserialization of Untrusted Data vulnerability in GS Plugins GS Pins for Pinterest, which allows for Object Injection. This issue affects versions from n/a through 1.9.2.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eThe vulnerability has a CVSS v3.1 Base Score of 8.8.\u003c/p\u003e\n","date_modified":"2026-10-21T11:19:40Z","date_published":"2026-10-21T11:19:40Z","id":"https://feed.craftedsignal.io/briefs/2026-10-gs-pins-deserialization/","summary":"GS Plugins GS Pins for Pinterest contains a Deserialization of Untrusted Data vulnerability that allows Object Injection.","title":"GS Plugins GS Pins for Pinterest: Deserialization of untrusted data (CVE-2026-110370)","url":"https://feed.craftedsignal.io/briefs/2026-10-gs-pins-deserialization/"},{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:gs_plugins:wordpress_team_members_gs_plugins:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":8.8,"id":"CVE-2026-110369"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["WordPress Team Members – GS Plugins (n/a through 2.8.2)"],"_cs_severities":["high"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["GS Plugins"],"content_html":"\u003cp\u003eThe WordPress Team Members - GS Plugins plugin (versions n/a through 2.8.2) contains a Deserialization of Untrusted Data vulnerability. This flaw allows Object Injection.\u003c/p\u003e\n","date_modified":"2026-10-21T11:19:34Z","date_published":"2026-10-21T11:19:34Z","id":"https://feed.craftedsignal.io/briefs/2026-10-gs-plugins-deserialization/","summary":"The WordPress Team Members - GS Plugins plugin is affected by a Deserialization of Untrusted Data vulnerability, allowing Object Injection.","title":"GS Plugins WordPress Team Members: Deserialization of untrusted data (CVE-2026-110369)","url":"https://feed.craftedsignal.io/briefs/2026-10-gs-plugins-deserialization/"}],"language":"en","title":"CraftedSignal Threat Feed - GS Plugins","version":"https://jsonfeed.org/version/1.1"}