CVE-2026-112862EUVD-2026-108629GHSA-J354-JQ2C-82GJ
WordPress Participants Database plugin <= 2.7.8.5 - PHP Object Injection vulnerability
- Published
- Last modified
- Status
- published
- Known exploitation
- Not listed in CISA KEV
- Public exploit
- None on Exploit-DB
Summary
The Participants Database plugin for WordPress is affected by this vulnerability. An attacker could exploit unsafe handling of untrusted data to inject malicious objects, which could potentially lead to code execution, data theft, or site compromise.
Summarized by anthropic/claude-haiku-5.5. Verify details against the original sources.
Read the original description
Deserialization of Untrusted Data vulnerability in xnau webdesign Participants Database participants-database allows Object Injection.This issue affects Participants Database: from n/a through 2.7.8.5.
Affected versions
- participants-database
through 2.7.8.5