Signal is active with 3 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
The Prime Mover – Backup and Migration plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.2.1 via deserialization of untrusted input in the migration search-and-replace routine (recursiveUnserializeReplace()). An unauthenticated attacker can store a crafted, base64-encoded serialized object in wp_comments.comment_content through the standard comment-submission endpoint (wp-comments-post.php). When an administrator subsequently performs a routine Prime Mover export or restore, the plugin base64-decodes that stored value and passes it to unserialize() with no allowed_classes restriction. A Property-Oriented Programming (POP) chain is present in the plugin's own bundled Freemius library (FS_Clone_Manager::__set → FS_Option_Manager::set_option → store() → update_option()), so no additional plugin or theme is required — the plugin ships the gadget itself.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
🔐CVE-2026-115806 — 9.8 in Prime Mover (WordPress) Comment plants payload. Admin export fires it. Gadget ships in the plugin's own Freemius bundle — no extras. Check wp_comments for base64 blobs. Patch: 2.2.2 https://threataft.com/articles/prime-mover-cve-2026-115806-php-object-injection #WordPress #CVE #CyberSecurity #PrimeMover
WordPressプラグイン Prime Mover にPHPオブジェクトインジェクションの脆弱性(CVSS 9.8)。使っている方は修正版が出ているか確認を。現時点で公式の修正版は確認できていません。 https://cve.autoarticles.net/cve/CVE-2026-115806
Si usás Prime Mover en WordPress, esto es para leer ya: hay una falla crítica (CVSS 9.8) que permite ejecutar código remoto sin ni siquiera loguearse. La solución es simple: actualizar a la 2.2.2 https://seguridadenwordpress.com/cve-2026-115806-prime-mover-vulnerabilidad-critica/
CVE-2026-115806 (CVSS 9.8) impacts Prime Mover WordPress plugin ≤2.2.1 via PHP Object Injection. Update immediately if in use: https://nvd.nist.gov/vuln/detail/CVE-2026-115806 via NVD Recent High CVSS #CyberSecurity #InfoSec #Vulnerability #AI #MachineLearning https://t.co/L9MSG98Xcx