Signal is active with 3 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been removed to prevent accidental usage.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-78572 PHP Object Injection in Kalles Addons WordPress Plugin Up To 1.0.6 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-78572
Post summary
The text announces a PHP Object Injection vulnerability (CVE‑2026‑78572) affecting the Kalles Addons WordPress Plugin up to version 1.0.6, without any mention of PoC, exploit code, active exploitation, or patches.
🚨*CVE* CVE-2026-78572 The Kalles Addons plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.0.6 via deserialization of untrusted input. This … https://www.cve.org/CVERecord?id=CVE-2026-78572 ----- Traducción: CVE-2026-78572 El … https://infoflow.cloud`
Post summary
CVE-2026-78572 is a PHP Object Injection flaw in the Kalles Addons WordPress plugin (up to v1.0.6) triggered by deserializing untrusted input.
CVE-2026-78572 The Kalles Addons plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.0.6 via deserialization of untrusted input. This … https://www.cve.org/CVERecord?id=CVE-2026-78572
Post summary
The Kalles Addons WordPress plugin has a PHP Object Injection vulnerability in all versions up to 1.0.6, with no PoC, exploit, or patch information provided.