CWE-502

Everything Firewall Pulse has reported about CWE-502: 2 stories, newest first. Part of our Vulnerabilities coverage.

11 Oct
Vulnerabilities

Travesia WordPress Theme CWE-502 Deserialization Vulnerability CVE-2026-93929 Hits v1.1.16 and Older

A critical object injection vulnerability in the Travesia WordPress theme allows untrusted data deserialization, affecting versions through 1.1.16 with a CVSS score of 9.8.

10 Oct
Vulnerabilities

Convex Plugin Deserialization Vulnerability Enables Remote Object Injection on WordPress Sites

Deserialization of untrusted data in the Convex plugin exposes WordPress sites to remote object injection attacks requiring immediate attention.