CyberSecBulletin

Johnny5 vulnerabilities

We track 1 vulnerability in Johnny5 products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 16, 2026.

1vulnerabilities
0critical
1high
0exploited
8.0average CVSS score

Latest Johnny5 vulnerabilities

  • 8.0 High severity

    Search Regex: Deserialization of Untrusted Data

    CVE-2026-104932Johnny5

    The Search Regex plugin for WordPress is vulnerable to PHP Object Injection in version 3.5 via deserialization of untrusted input in the replace_all function. This allows authenticated attackers, with subscriber-level access and above, to inject a PHP Object.