VYPR

QA Assistants – Driven by data

by WordPress

CVEs (1)

  • CVE-2026-87112HigNov 7, 2026
    risk 0.57cvss 8.8epss —

    The QA Assistants – Driven by data plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 5.3.0 via the 'dlevent_ver' parameter. This is due to unrestricted PHP deserialization via wrap_unserialize_static() calling unserialize()…