CVE-2026-110370

Publié : 21 octobre 2026

Modifié : 21 octobre 2026

Score CVSS

8.8

HIGH

Description détaillée

Deserialization of Untrusted Data vulnerability in GS Plugins GS Pins for Pinterest gs-pinterest-portfolio allows Object Injection.This issue affects GS Pins for Pinterest: from n/a through 1.9.2.

Vecteur d'attaque (CVSS)

Vecteur brut :CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Références et Patchs

https://patchstack.com/database/wordpress/plugin/gs-pinterest-portfolio/vulnerability/wordpress-gs-pins-for-pinterest-plugin-1-9-2-php-object-injection-vulnerability?_s_id=cve

Dernières Vulnérabilités

CVE-2026-87096

Sensitive information disclosure and manipulation due to improper authorization checks. The following products are affected: Acronis Cyber Infrastructure (ACI) before build 6.0.1-112, Acronis Cyber Infrastructure (ACI) before build 6.1.1-64, Acronis Cyber Infrastructure (ACI) before build 6.2.1-71.

VOIR DÉTAILS

CVE-2026-87095

VOIR DÉTAILS

CVE-2026-58663

An authentication bypass vulnerability exists in Apache IoTDB's Thrift RPC service This issue affects Apache IoTDB: from 2.0.0 before 2.0.11. Users are recommended to upgrade to version 2.0.11, which fixes the issue.

VOIR DÉTAILS