PULSEUnderground Intel

EN VIVO24señales / 24h

FEED

ransomkrybit reclama a chkck.com · Technologyransomqilin reclama a WellPerf · GB · Healthcareransomthegentlemen reclama a Sirl · PT · Not Foundransomthegentlemen reclama a Disney Family · US · Financial Servicesransomqilin reclama a Corporate 360 Business Solutions · CA · Professional Servicesransomqilin reclama a Assos Pharmaceuticals · TR · Healthcareransomqilin reclama a Cano Industrial · MX · Manufacturingransomqilin reclama a Triton Trading · PE · Financial Servicesransomqilin reclama a AppleOne Properties · PH · Not Foundransommoneymessage reclama a Indigo Energy · CA · Energyransomqilin reclama a Sunway Berhad · MY · Hospitality and Tourismransomkairos reclama a LR Reed · AU · Business Servicesransomnova reclama a VNSO · Not Foundransomblacknevas reclama a Zuni Shopping Center, Inc. · US · Consumer Servicesransomkrybit reclama a chkck.com · Technologyransomqilin reclama a WellPerf · GB · Healthcareransomthegentlemen reclama a Sirl · PT · Not Foundransomthegentlemen reclama a Disney Family · US · Financial Servicesransomqilin reclama a Corporate 360 Business Solutions · CA · Professional Servicesransomqilin reclama a Assos Pharmaceuticals · TR · Healthcareransomqilin reclama a Cano Industrial · MX · Manufacturingransomqilin reclama a Triton Trading · PE · Financial Servicesransomqilin reclama a AppleOne Properties · PH · Not Foundransommoneymessage reclama a Indigo Energy · CA · Energyransomqilin reclama a Sunway Berhad · MY · Hospitality and Tourismransomkairos reclama a LR Reed · AU · Business Servicesransomnova reclama a VNSO · Not Foundransomblacknevas reclama a Zuni Shopping Center, Inc. · US · Consumer Services

← Todos los CVEs

CVE Watch23 jul 2026

CVE-2026-59544

Unauthenticated PHP Object Injection in Thrive Quiz Builder <= 10.9.3.0 versions.

CVSS

9.8

Crítico

EPSS

—

KEV

—

Exploit Today

0

0-100

Publicado: 23 jul 2026 · Última mod.: 23 jul 2026 · CWE-502

EPSS · 30d

Sin historial EPSS suficiente todavía.

Descripción técnica

Unauthenticated PHP Object Injection in Thrive Quiz Builder <= 10.9.3.0 versions.

Referencias oficiales

patchstack.comhttps://patchstack.com/database/wordpress/plugin/thrive-quiz-builder/vulnerability/wordpress-thrive-quiz-builder-plugin-10-9-3-0-php-object-injection-vulnerability?_s_id=cve

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2026-654977.2 ALT

——0Administrator PHP Object Injection in Complianz <= 7.5.0 versions.3h CVE-2026-654937.5 ALT

——0Subscriber PHP Object Injection in Dokan Pro <= 5.0.2 versions.3h CVE-2026-167239.0 CRÍ

——14A remote code execution (RCE) vulnerability exists in fastjson 1.2.68 through 1.2.83. This vulnerability is exploitable under fastjson's stock default configuration — no AutoType enablement required, no classpath gadget required.6h CVE-2026-131908.1 ALT

——14In Progress® Telerik® UI for AJAX prior to v2026.2.708, a deserialization vulnerability in the persistence utilities allows unsafe type instantiation from attacker-influenced persisted state, which can lead to remote code execution.19h CVE-2026-131858.1 ALT

——14In Progress® Telerik® UI for AJAX prior to v2026.2.708, applications using cookie-based storage in RadPersistenceManager or RadDockLayout deserialize attacker-controlled cookie content, allowing unauthenticated remote code execution.19h CVE-2026-242324.3 MED

——1NVIDIA Tranformers4Rec contains a vulnerability where an attacker could cause improper deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure.2d