CVE-2026-110370

Deferred Deferred - Pending Action

Deserialization of Untrusted Data in GS Pins for Pinterest

Publication date: 2026-10-21

Last updated on: 2026-10-21

Assigner: Patchstack

Description

Deserialization of Untrusted Data vulnerability in GS Plugins GS Pins for Pinterest gs-pinterest-portfolio allows Object Injection.This issue affects GS Pins for Pinterest: from n/a through 1.9.2.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-21

Last Modified

2026-10-21

Generated

2026-11-10

AI Q&A

2026-10-22

EPSS Evaluated

2026-11-09

NVD

CVE-2026-110370

EUVD

EUVD-2026-107157

Affected Vendors & Products

Vendor	Product	Version / Range
GS Plugins	GS Pins for Pinterest	0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-502	The product deserializes untrusted data without sufficiently ensuring that the resulting data will be valid.

Attack-Flow Graph

Executive Summary

This vulnerability is a PHP Object Injection flaw in the WordPress GS Pins for Pinterest plugin versions 1.9.2 and earlier. It allows attackers with contributor-level access to manipulate data processing and execute harmful server actions through deserialization of untrusted data.

Detection Guidance

To detect this vulnerability, check if the GS Pins for Pinterest plugin version is 1.9.2 or earlier. Use WordPress admin panel to view plugin versions or run commands like 'wp plugin list' in WP-CLI to list installed plugins and their versions.

Impact Analysis

Attackers could exploit this to perform unauthorized actions on your server, potentially leading to data breaches, site defacement, or further compromise of your WordPress installation. The high CVSS score indicates significant risk.

Compliance Impact

This vulnerability could lead to unauthorized data access or modification, violating GDPR and HIPAA requirements for data protection and integrity. Organizations may face compliance penalties if exploited.

Mitigation Strategies

Immediately update the GS Pins for Pinterest plugin to version 1.9.3 or later. Alternatively, apply Patchstack's mitigation rule if updating is not feasible. Enable auto-updates for vulnerable plugins to prevent future issues.

Hi! I’m here to help you understand CVE-2026-110370. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70

EPSS Chart

Security Radar

News mentioning this vulnerability

Loading related security news...