https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-23T10:32:17.607123+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-16297 CVE-2026-16297 — Clearfy < 2.4.3 - Admin+ PHP Object Injection via Settings Import 2026-10-23T10:32:17.624823+00:00

Affected: Unknown Clearfy Cache

The Clearfy Cache WordPress plugin before 2.4.3 does not restrict the classes allowed when unserializing settings-import data, allowing users with administrator access to perform PHP Object Injection attacks, which may lead to remote code execution when a suitable gadget chain is present in the environment.