CVE-2026-118081
Deferred Deferred - Pending Action

PHP Object Injection in 10Web Social Photo Feed

Publication date: 2026-10-29

Last updated on: 2026-10-29

Assigner: Patchstack

Description
Contributor PHP Object Injection in 10Web Social Photo Feed <= 1.5.6 versions.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-29
Last Modified
2026-10-29
Generated
2026-10-29
AI Q&A
2026-10-29
EPSS Evaluated
N/A
NVD
CVE-2026-118081
EUVD
EUVD-2026-112998

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
10Web 10Web Social Photo Feed n/a

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-502 The product deserializes untrusted data without sufficiently ensuring that the resulting data will be valid.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

The vulnerability is a PHP Object Injection flaw in the 10Web Social Photo Feed WordPress plugin versions up to 1.5.6. Attackers can exploit this to manipulate data processing and execute harmful actions on the server by injecting malicious objects.

Detection Guidance

Check if the 10Web Social Photo Feed plugin version 1.5.6 or lower is installed on your WordPress site. Look for unusual server behavior or unexpected data processing. No specific commands are provided in the resources.

Impact Analysis

This vulnerability allows attackers to execute arbitrary code on your server, potentially leading to full system compromise, data theft, or website defacement. It can be exploited remotely without requiring high privileges.

Mitigation Strategies

Disable or remove the 10Web Social Photo Feed plugin immediately. Apply Patchstack's mitigation rule if available. Contact your hosting provider or developer for further assistance until an official patch is released.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-118081. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart