CVE-2026-116389
CVE-2026-116389 · WordPress Phoenix Media Rename plugin <= 3.13.5 - PHP Object Injection vulnerability
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Deserialization of Untrusted Data vulnerability in crossi72 Phoenix Media Rename phoenix-media-rename allows Object Injection.This issue affects Phoenix Media Rename: from n/a through 3.13.5.
CVSS 8.8 · High · EPSS 0.3%
- Published
- Updated
Affected products and versions
phoenix media rename
- Versions
- ≥ 0, ≤ 3.13.5: Affected (custom)
No fix published