CVE-2026-62131EUVD-2026-112982
WordPress Zoho Flow plugin <= 2.14.5 - PHP Object Injection vulnerability
- Published
- Last modified
- Status
- published
- Known exploitation
- Not listed in CISA KEV
- Public exploit
- None on Exploit-DB, Metasploit or GitHub
Summary
Unauthenticated PHP Object Injection in Zoho Flow <= 2.14.5 versions.
Affected versions
- zoho-flow
through 2.14.5