6.5
Medium
CVE-2026-1542 The Super Stage WP WordPress plugin through 1.0.1 unserializes user input via REQUEST, which could allow unauthenticated…
Description
The Super Stage WP WordPress plugin through 1.0.1 unserializes user input via REQUEST, which could allow unauthenticated users to perform PHP Object Injection when a suitable gadget is present on the blog.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Super Stage WP 1.0 | earliest → 1.0.1 | No fix stated |