CVE-2026-1542 — Super Stage WP <= 1.0.1 - Unauthenticated PHP Object Injection

CVE-2026-1542

Super Stage WP <= 1.0.1 - Unauthenticated PHP Object Injection PUBLISHED

Description (CNA)

The Super Stage WP WordPress plugin through 1.0.1 unserializes user input via REQUEST, which could allow unauthenticated users to perform PHP Object Injection when a suitable gadget is present on the blog.

Affected (CNA)

Vendor / product	Versions
Unknown / Super Stage WP	affected 0 through 1.0.1

CWE

No CWE identifiers supplied.

References

https://wpscan.com/vulnerability/d6e3041f-62e8-49ba-8806-59a1c07ec43d/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.