CVE-2026-32513Disclosure

LOWCVSS 8.8 · HIGH

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

Prioritize remediation for affected systems immediately
Hunt for exploitation attempts and persistence artifacts
Increase monitoring for publicly documented tradecraft
Track advisory updates for patch or workaround availability

Recommended action window: High priority (within 72h)

NVD description

Deserialization of Untrusted Data vulnerability in Miguel Useche JS Archive List jquery-archive-list-widget allows Object Injection.This issue affects JS Archive List: from n/a through <= 6.1.7.

Back to dashboard

3.5/ 10 priority

Sources & remediation

Other references

https://patchstack.com/database/Wordpress/Plugin/jquery-archive-list-widget/vulnerability/wordpress-js-archive-list-plugin-6-1-7-php-object-injection-vulnerability?_s_id=cve

Weakness type (CWE)

CWE-502

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

STABLE

Threat summary

Public PoC and exploit tooling are both present
4 mentions across 3 observed days
Momentum state: stable

What's happening

Exploit tool or code specified in 1 signal
PoC mentioned or linked in 1 signal
Technical details provided in 4 signals
Disclosure: 3 classified signals
Peaked 1d ago at 2 mentions (2026-03-26); latest day: 1
4 total mentions across 3 days

Deep dive

Activity timeline4 mentions / 3d

Signal classification2 categories

Disclosure

375.0%

PoC

125.0%

Referenced assets4 URLs

By indicator

Classification over time

Date	Total	Labels

2026-03-25	1	Disclosure1
2026-03-26	2	Disclosure2
2026-04-08	1	PoC1

Full discourse4 posts

CVE@CVEnew198d
Disclosure
CVE-2026-32513 Deserialization of Untrusted Data vulnerability in Miguel Useche JS Archive List jquery-archive-list-widget allows Object Injection.This issue affects JS Archive List… https://www.cve.org/CVERecord?id=CVE-2026-32513
Post summary
The tweet announces a new deserialization vulnerability (CVE-2026-32513) in the jquery-archive-list-widget that permits object injection, with no evidence of PoC, exploit, or patch.
00010215
56.8K followersView on X
Atomic Edge@atomicedgeWAF185d
PoC
https://atomicedge.io/cve-proof/cve-2026-32513-jquery-archive-list-widget-version-6-1-7-high-vulnerability-proof-of-concept CVE-2026-32513 #WordPress plugin #vulnerability jquery-archive-list-widget #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #ato…
Post summary
The post shares a proof‑of‑concept for CVE‑2026‑32513 targeting jQuery Archive List Widget v6.1.7, indicating a high‑severity vulnerability without evidence of active exploitation or patch guidance.
0000039
6 followersView on X
Infoflowcloud@infoflowcloud198d
Disclosure
🚨*CVE* CVE-2026-32513 Deserialization of Untrusted Data vulnerability in Miguel Useche JS Archive List jquery-archive-list-widget allows Object Injection.This issue affects JS Archive List… https://www.cve.org/CVERecord?id=CVE-2026-32513 ----- Traducción: CVE-2026-32513 Des… http://infoflow.cloud`
Post summary
The tweet is a brief disclosure of CVE-2026-32513, describing a deserialization/object injection flaw in the JS Archive List widget, with no PoC, exploit, patch, or exploitation evidence shared.
0000028
61 followersView on X
The Hacker Wire@TheHackerWire198d
Disclosure
🟠 CVE-2026-32513 - High Deserialization of Untrusted Data vulnerability in Miguel Useche JS Archive List jquery-archive-list-widget allows Object Injection.This issue affects JS Archive List: from n/a through &lt;= ... https://www.thehackerwire.com/vulnerability/CVE-2026-32513/ https://t.co/2toxbdxODE
Post summary
The tweet announces a high‑severity deserialization vulnerability (CVE‑2026‑32513) in the JS Archive List widget that permits object injection, but it provides no PoC, exploit, or patch details.
0000048
145 followersView on X

Explore more

Back to dashboard

What researchers are saying

CVE-2026-32513

CVE@CVEnewDisclosure

The tweet announces a new deserialization vulnerability (CVE-2026-32513) in the jquery-archive-list-widget that permits object injection, with no evidence of PoC, exploit, or patch.

Atomic Edge@atomicedgeWAFPoC

The post shares a proof‑of‑concept for CVE‑2026‑32513 targeting jQuery Archive List Widget v6.1.7, indicating a high‑severity vulnerability without evidence of active exploitation or patch guidance.

Infoflowcloud@infoflowcloudDisclosure

The tweet is a brief disclosure of CVE-2026-32513, describing a deserialization/object injection flaw in the JS Archive List widget, with no PoC, exploit, patch, or exploitation evidence shared.

The Hacker Wire@TheHackerWireDisclosure

The tweet announces a high‑severity deserialization vulnerability (CVE‑2026‑32513) in the JS Archive List widget that permits object injection, but it provides no PoC, exploit, or patch details.