NVD security advisoryHigh
High advisory for Subscriber PHP Object Injection in News
CVE-2026-118073 · Reported 29 Oct 2026
Full advisory details, affected packages, severity context, and original source.
Affected technology
Subscriber PHP Object Injection in NewsPHP ecosystem
Advisory overview
Subscriber PHP Object Injection in News Kit Elementor Addons <= 1.5.0 versions.
