Description
Shop manager PHP Object Injection in Finale Lite <= 2.21.0 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Daman Jeet | Finale Lite | ≤ 2.21.0 | — |
High · 7.2
CVE-2026-118074
EUVD-2026-112991GHSA-pv9h-hqgj-5hw6
WordPress Finale Lite plugin <= 2.21.0 - PHP Object Injection vulnerability
Published Oct 29, 2026 · Updated Oct 30, 2026 · Assigned by Patchstack