itthinx CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

CRITICAL itthinx CVE published 2026-10-14

CVE-2026-108291

The CVE-2026-108291 vulnerability is a PHP Object Injection issue in the WordPress Affiliates plugin, affecting versions up to 7.0.1. This critical vulnerability has a CVSS score of 9.8 and allows for deserialization of untrusted data, potentially leading to object injection. The vulnerability is caused by the deserialization of untrusted data in the plugin, which can be exploited by attackers to inject m [truncated]