Deserialization

Everything Firewall Pulse has reported about Deserialization: 2 stories, newest first. Part of our Vulnerabilities coverage.

10 Oct
Vulnerabilities

Gutentype Object Injection: Critical Deserialization of Untrusted Data Affects Versions Through 2.1.12

The National Vulnerability Database rates CVE-2026-62046 as critical, warning that untrusted data handling in the Gutentype plugin enables object injection.

10 Oct
Vulnerabilities

ThemeREX Greeny Object Injection Bug Affects All Versions to 2.10.0 With 9.8 CVSS Score

A critical vulnerability in the ThemeREX Greeny WordPress theme allows object injection through untrusted data deserialization in versions up to 2.10.0.