johnny5 CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH johnny5 CVE published 2026-10-16

CVE-2026-104932

The Search Regex plugin for WordPress has a PHP Object Injection vulnerability in version 3.5. Authenticated attackers with subscriber-level access can inject PHP objects due to untrusted input deserialization in the replace_all function. A POP chain allows code execution. This vulnerability allows attackers to potentially execute code, making it critical for defenders to assess exposure and prioritize ve [truncated]