Vulnerabilities
PHP Object Injection: How Serialized Data Compromises Web Apps
PHP object injection turns harmless data into executable code by tricking the server into reconstructing objects with malicious properties.
Read moreobject injection
Everything BlueTeam Insider has reported about object injection: 2 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
VillaTheme AFFI Object Injection CVE-2026-104398 Grants RCE on WooCommerce v1.0.10
A critical object injection vulnerability in the VillaTheme AFFI plugin allows remote code execution on WooCommerce sites running versions up to 1.0.10.
Read more