https://pentest-tools.com/vulnerabilities-exploits/nodebb-xml-rpc-request-xmlrpcphp-xml-injection_22565
NodeBB XML-RPC Request xmlrpc.php - XML Injection (CVE-2023-43187) - Vulnerability & Exploit...
A remote code execution (RCE) vulnerability in the xmlrpc.php endpoint of NodeBB Inc NodeBB forum software prior to v1.18.6 allows attackers to execute...
xml rpcphp injectionnodebbrequestxmlrpc
https://techearl.com/eval-injection
eval() Injection in PHP, Python, JS, Ruby (2026 Field Guide)
Why eval still ships. Cross-language sinks. Real CVE history. The structural alternatives. Field notes plus a Dockerised lab.
eval injectionfield guidephppythonruby
https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/squirrly-seo/geo-plugin-by-squirrly-seo-1425-authenticated-contributor-php-object-injection
GEO Plugin by Squirrly SEO = 14.2.5 - Authenticated (Contributor+) PHP Object Injection
php object injectionsquirrly seogeopluginauthenticated
https://kreomnisvigie.com/cve/cve-2026-94110-qcms
CVE-2026-94110 : CVE-2026-94110 — SQL Injection via self_Tmp in Lib/Config/Controllers.php ·...
Sep 22, 2026 - QCMS jusqu’à 6.0.6 présente une injection SQL via self_Tmp dans Lib/Config/Controllers.php, manipulant l’ID et les requêtes ROUTER sans décodage d’URI correct.
sql injectioncveviaselftmp
https://cve-alerts.datmt.com/cve/CVE-2026-93624
CVE-2026-93624: WordPress Music Player for WooCommerce plugin = 1.9.1 - PHP Object Injection...
HIGH severity (CVSS 7.2). EPSS exploitability: 0.0%. Affects codepeople music player for woocommerce. Shop manager PHP Object Injection in Music Player for...
php object injectionmusic playerwoocommerce plugincvewordpress
https://cve.imfht.com/detail/CVE-2006-0729
CVE-2006-0729: SQL injection vulnerability in functions.php in Teca Diary - Vulnerability Platform
Feb 27, 2026 - [高危] Vulnerability Overview An SQL injection vulnerability exists in the file of Teca Diary PE 1.0, allowing remote attackers to execute arbitrary SQL comm
sql injection vulnerabilitycvefunctionsphpteca
https://www.invicti.com/web-application-vulnerabilities/wordpress-plugin-coming-soon-maintenance-mode-page-php-object-injection-1-42
WordPress Plugin Coming Soon & Maintenance Mode Page PHP Object Injection (1.42) - Web Application...
php object injectionwordpress plugincoming soonmaintenance modeweb application
https://www.drupal.org/node/3600740
Flag attendance field - Critical - PHP object injection - SA-CONTRIB-2026-049 | Drupal.org
Jun 17, 2026 - The Flag attendance field module gives you the ability to add attendance by depending on Flag module. flag_attendance_field stores some data as PHP-serialized...
php object injectionflagattendancefieldcritical
https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/ws-form/ws-form-lite-11080-unauthenticated-php-object-injection-via-form-submission
WS Form LITE = 1.10.80 - Unauthenticated PHP Object Injection via Form Submission
php object injectionws formliteunauthenticatedvia
https://omercitak.com/php-object-injection/
PHP Object Injection | Omer Citak's Blog | Om3rCitak
ömer çıtak, omer citak, om3rcitak, security, development, php, vulnerability, ethical hacking
php object injectionomercitakblog
https://joind.in/event/php-tour-2017-nantes-/dependency-injection-and-dependency-inversion-in-php
Dependency Injection and Dependency Inversion in PHP - PHP Tour 2017 Nantes - Joind.in
dependency injectioninversionphptournantes