SecvalisbySYSDEVOPS.EU
CVE Catalog
EnglishPolski

CVE-2026-118081

HighCVSS 8.8
Published: Updated: Translated: NVD NIST

Summary

10Web Social Photo Feed plugin versions up to 1.5.6 contain a Contributor PHP Object Injection vulnerability.

Risk Assessment

A Contributor-role user can exploit the vulnerability to execute malicious code or further escalate privileges.

Recommendation

Update the 10Web Social Photo Feed plugin to a version later than 1.5.6. Restrict Contributor roles to trusted users.

Other vulnerabilities in 10Web Social Photo Feed

Original NVD description (English source)

Contributor PHP Object Injection in 10Web Social Photo Feed <= 1.5.6 versions.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS