CVE-2026-94122
Received Received - Intake

Editor PHP Object Injection in Responsive Slider Gallery

Publication date: 2026-09-30

Last updated on: 2026-09-30

Assigner: Patchstack

Description
Editor PHP Object Injection in Responsive Slider Gallery <= 1.5.5 versions.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-30
Last Modified
2026-09-30
Generated
2026-09-30
AI Q&A
2026-09-30
EPSS Evaluated
N/A
NVD
CVE-2026-94122
EUVD
EUVD-2026-89839

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
patchstack responsive_slider_gallery to 1.5.5 (inc)
patchstack responsive_slider_gallery 1.5.6

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-502 The product deserializes untrusted data without sufficiently ensuring that the resulting data will be valid.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a PHP Object Injection vulnerability in the Responsive Slider Gallery WordPress plugin versions 1.5.5 and below. It allows attackers to manipulate data processing on the server by injecting malicious objects, potentially leading to harmful actions such as code execution or unauthorized access.

Detection Guidance

Check if the Responsive Slider Gallery plugin version is 1.5.5 or below. Use commands like 'wp plugin list' in WordPress CLI or inspect the plugin files for version details in the WordPress admin panel.

Impact Analysis

An attacker could exploit this flaw to execute arbitrary code on your server, gain unauthorized access to sensitive data, or take control of your website. The vulnerability has a high impact on confidentiality, integrity, and availability of the system, with a CVSS score of 7.2 indicating significant risk.

Compliance Impact

This vulnerability could lead to data breaches, exposing personal or sensitive information. Such breaches may violate GDPR, HIPAA, or other regulations, resulting in legal penalties, fines, or reputational damage due to non-compliance with data protection requirements.

Mitigation Strategies

Update the Responsive Slider Gallery plugin to version 1.5.6 immediately. If updating is not possible, apply the Patchstack mitigation rule to block attacks until the update is applied.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-94122. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart