CVE Catalog
CVE-2026-65571
CriticalCVSS 9.8Summary
Unauthenticated PHP Object Injection in 69 Clothing versions up to 1.2.11.1.
Risk Assessment
The vulnerability allows an unauthenticated attacker to inject malicious PHP objects, potentially leading to remote code execution.
Recommendation
Update the 69 Clothing plugin to the latest version that includes the security fix.
Original NVD description (English source)
Unauthenticated PHP Object Injection in 69 Clothing <= 1.2.11.1 versions.