Terms

PHP Object Deserialization

Follow the latest coverage, related explainers and connected technology stories.

Latest coverage

CN
Critical Vulnerability in GiveWP Plugin Enables Command Execution on WordPress Servers

Critical Vulnerability in GiveWP Plugin Enables Command Execution on WordPress Servers

The CVE-2026-82222 vulnerability in the GiveWP plugin allows attackers to execute arbitrary commands on a WordPress server and may affect versions up to 4.16.7.1. GiveWP released version 4.16.7.2 to address the flaw and delete serialized object payloads stored in affected databases.