High · 8.8 CVE-2026-32513 EUVD-2026-15870GHSA-g2rf-phpj-m3m9

WordPress JS Archive List plugin <= 6.1.7 - PHP Object Injection vulnerability

Published Mar 25, 2026 · Updated Apr 29, 2026 · Assigned by Patchstack

Vendor: Miguel Useche Product: JS Archive List

Description

Deserialization of Untrusted Data vulnerability in Miguel Useche JS Archive List jquery-archive-list-widget allows Object Injection.This issue affects JS Archive List: from n/a through <= 6.1.7.

Affected products

Vendor	Product	Affected	Fixed
Miguel Useche	JS Archive List	≤ <= 6.1.7	—

References

https://patchstack.com/database/Wordpress/Plugin/jquery-archive-list-widget/vulnerability/wordpress-js-archive-list-plugin-6-1-7-php-object-injection-vulnerability?_s_id=cve vdb-entry

CNA	v3.1	8.8
EUVD	v3.1	8.8
CISA-ADP	v3.1	8.8