216.73.217.139

CVE-2026-1542

· Published 28/02/2026 06:16 · Modified 28/02/2026 06:16

Labels: CVE-2026-1542 2026-02-28CVE-2026-1542[email protected]

Essential information

Published
28/02/2026 06:16
Modified
28/02/2026 06:16
Author
—
Creator
—
CISA KEV
No
CWE
—

Description

The Super Stage WP WordPress plugin through 1.0.1 unserializes user input via REQUEST, which could allow unauthenticated users to perform PHP Object Injection when a suitable gadget is present on the blog.

NVD status

Status
Received — CVE has been recently published to the CVE List and has been received by the NVD.
Source
[email protected]
NVD
View on NVD

Affected products (CPE)

ProductCPE
super stage wp / super stage wp cpe:2.3:a:super_stage_wp:super_stage_wp:1.0.1:*:*:*:*:wordpress:*:*

References