GS Plugins CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH GS Plugins CVE published 2026-10-21

CVE-2026-110369

A PHP Object Injection vulnerability exists in WordPress Team Members – GS Plugins plugin versions up to 2.8.2. This issue, caused by deserialization of untrusted data, allows for potential object injection. The vulnerability has a CVSS score of 8.8 and is considered high severity. Defenders should assess exposure and prioritize verification and potential updates. The CVE record and source item provide de [truncated]

HIGH GS Plugins CVE published 2026-10-21

CVE-2026-110370

A PHP Object Injection vulnerability exists in the WordPress GS Pins for Pinterest plugin versions up to 1.9.2. This issue arises from the deserialization of untrusted data, allowing for potential object injection. The vulnerability has been assigned a high CVSS score of 8.8. GS Plugins is the affected vendor, and the plugin is available on the WordPress platform.