Vulnerabilities
Mitigate TastyIgniter 4.4.5 Admin Code Execution Flaw
An authenticated admin can execute code on TastyIgniter servers through a settings form vulnerability in versions up to 4.4.5.
PHP object injection
Everything Patch Review has reported about PHP object injection: 2 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
Update BoldThemes Avala to 1.1.5 to Patch Critical CVE-2026-62077 Insecure Deserialization Vulnerability
The BoldThemes Avala plugin contains a severe vulnerability allowing attackers to inject PHP objects without logging in, affecting versions up to 1.1.4.