CVE-2026-114196
WordPress Paytium plugin <= 5.0.5 - PHP Object Injection vulnerability
- Published
- Last modified
- Status
- published
- Known exploitation
- Not listed in CISA KEV
- Public exploit
- None on Exploit-DB
Summary
The Paytium plugin for WordPress is affected by this vulnerability, which allows unsafe processing of untrusted data. An attacker could exploit it to inject malicious PHP objects, potentially leading to code execution, data tampering, or unauthorized access on the affected website.
Summarized by anthropic/claude-haiku-5.5. Verify details against the original sources.
Read the original description
Deserialization of Untrusted Data vulnerability in paytiumsupport Paytium paytium allows Object Injection.This issue affects Paytium: from n/a through 5.0.5.
Affected versions
- paytium
through 5.0.5