CVE-2026-27380

HighCVSS 7.2

Published: 13/08/2026(UTC)Updated: 14/08/2026(UTC)Translated: 13/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.37%

30th percentile - higher than 30% of all known CVEs

Summary

The Car Rental Manager plugin versions up to 1.3.9 have a PHP Object Injection vulnerability exploitable by users with the editor role. An attacker can exploit this to execute malicious code on the server.

Risk Assessment

Risk of remote code execution, potentially leading to full server compromise or data theft.

Recommendation

Update the Car Rental Manager plugin to the latest version that includes a fix for this vulnerability.

Original NVD description (English source)

Editor PHP Object Injection in Car Rental Manager <= 1.3.9 versions.