Description
Editor PHP Object Injection in OptionTree <= 2.7.3 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Derek Herman | OptionTree | ≤ 2.7.3 | — |
High · 7.2
CVE-2026-66620
EUVD-2026-60913GHSA-rcj8-2wj2-6g63
WordPress OptionTree plugin <= 2.7.3 - PHP Object Injection vulnerability
Published Aug 18, 2026 · Updated Aug 18, 2026 · Assigned by Patchstack