Vulnerabilities

CVE-2026-1542 - Super Stage WP <= 1.0.1 - unauthenticated php object injection

2026-02-28 0 views admin

CVE ID : CVE-2026-1542 Published : Feb. 28, 2026, 6:16 a.m. | 1 hour, 44 minutes ago Description : The Super Stage WP WordPress plugin through 1.0.1 unserializes user input via REQUEST, which could allow unauthenticated users to perform PHP Object Injection when a suitable gadget is present on the blog. Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE Details

CVE ID

CVE-2026-1542

Published

Feb. 28, 2026

Affected Product: WordPress

🏷️ Tags

cvevulnerabilitysecuritycybersecuritycve-2026-1542wordpress

CVE-2026-1542 - Super Stage WP <= 1.0.1 - unauthenticated php object injection

CVE Details

🏷️ Tags

More from Vulnerabilities

CVE-2025-13673 - Tutor LMS <= 3.9.6 - unauthenticated sql injection via coupon_code

CVE-2026-28417 - Vim has OS Command Injection in netrw

CVE-2026-28416 - Gradio has SSRF via Malicious `proxy_url` Injection in `gr.load()` Config Proces...

CVE-2026-28415 - Gradio has Open Redirect in OAuth Flow

Trending

CVE-2025-61481: Critical Remote Code Execution Vulnerability in MikroTik RouterOS & SwitchOS

CVE-2025-43939: Dell Unity OS Command Injection (High)

Google disputes false claims of massive Gmail data breach

Microsoft: DNS outage impacts Azure and Microsoft 365 services

3.5B Accounts, 1 Critical Flaw: Meta Closes WhatsApp Data-Harvesting