Everything TechWire Beat has reported about PHP Object Injection: 3 stories, newest first. Part of our Vulnerabilities coverage.
A critical flaw in Booster for WooCommerce versions up to 8.4.0 allows unauthenticated PHP object injection, posing severe risks to affected systems.
A severe vulnerability in the Dynamic User Directory WordPress plugin allows attackers to execute arbitrary code on affected installations.
A severe vulnerability in the Yacht Rental WordPress theme allows unauthenticated attackers to inject malicious code into sites running version 2.6 or earlier.