CVE-2026-65497
HighCVSS 7.2Summary
The Complianz plugin versions up to 7.5.0 contain a PHP Object Injection vulnerability exploitable by an administrator. An attacker with admin privileges can inject a malicious PHP object.
Risk Assessment
The risk involves the possibility of executing arbitrary PHP code on the server, potentially leading to full site compromise.
Recommendation
It is recommended to update the Complianz plugin to a version above 7.5.0 that fixes the PHP Object Injection vulnerability.
Other vulnerabilities in Complianz
See all- CVE-2026-65496Medium
The Complianz plugin versions 7.5.0 and earlier have a Server-Side Request Forgery (SSRF) vulnerability exploitable by an author. A user with author role can force the server to send requests to internal resources.
- CVE-2026-65498Medium
The Complianz plugin versions 7.5.0 and earlier are vulnerable to unauthenticated sensitive data exposure. Unauthenticated attackers can access confidential information.
Original NVD description (English source)
Administrator PHP Object Injection in Complianz <= 7.5.0 versions.