Log in Scan Now

All security reports

NVD security advisoryCritical

Critical advisory for Unauthenticated PHP Object Injection in

CVE-2026-90888 · Reported 30 Oct 2026

Full advisory details, affected packages, severity context, and original source.

Affected technology

Unauthenticated PHP Object Injection inPHP ecosystem

Advisory overview

Unauthenticated PHP Object Injection in LeadSnap <= 1.25 versions.

Related references

https://patchstack.com/database/wordpress/plugin/leadsnap/vulnerability/wordpress-leadsnap-plugin-1-25-php-object-injection-vulnerability?_s_id=cve

Your vulnerabilities. One clear dashboard.

Find and review known vulnerabilities across your applications and infrastructure in one dashboard, so your team can see what needs attention and take action to fix it.

Create your account

Unauthenticated PHP Object Injection in LeadSnap <= 1.25 versions. | Security report | Cevnitra