VYPR

Search Regex

by WordPress

CVEs (1)

  • CVE-2026-104932HigOct 16, 2026
    risk 0.52cvss 8.0epss —

    The Search Regex plugin for WordPress is vulnerable to PHP Object Injection in version 3.5 via deserialization of untrusted input in the replace_all function. This allows authenticated attackers, with subscriber-level access and above, to inject a PHP Object. The additional…