Description
Contributor PHP Object Injection in 10Web Social Photo Feed <= 1.5.6 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| 10Web | 10Web Social Photo Feed | ≤ 1.5.6 | — |
High · 8.8
CVE-2026-118081
EUVD-2026-112998GHSA-qqw3-49j2-4v55
WordPress 10Web Social Photo Feed plugin <= 1.5.6 - PHP Object Injection vulnerability
Published Oct 29, 2026 · Updated Oct 29, 2026 · Assigned by Patchstack