CVE-2026-73376: supsystic Ultimate Maps by Supsystic, десериализация

Описание

Оригинално описание

Unauthenticated PHP Object Injection in Ultimate Maps by Supsystic < 1.5.0 versions.

Засегнати продукти

• supsystic Ultimate Maps by Supsystic: n/a преди 1.5.0

Вид слабост

• CWE-502 Десериализация на ненадеждни данни

История

Други уязвимости в supsystic Ultimate Maps by Supsystic

• 6.5CVE-2026-102397
• 7.1CVE-2026-102396
• 5.3CVE-2026-85309
• 7.5CVE-2026-73377
• 7.1CVE-2026-73375

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2026-73376
• https://nvd.nist.gov/vuln/detail/CVE-2026-73376
• https://patchstack.com/database/wordpress/plugin/ultimate-maps-by-supsystic/vulnerability/wordpress-ultimate-maps-by-supsystic-plugin-1-5-0-php-object-injection-vulnerability?_s_id=cve