CVE-2026-94683
Received Received - Intake

DesignSetGo <= 2.8.0 PHP Object Injection

Publication date: 2026-09-30

Last updated on: 2026-09-30

Assigner: Patchstack

Description
Contributor PHP Object Injection in DesignSetGo <= 2.8.0 versions.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-30
Last Modified
2026-09-30
Generated
2026-09-30
AI Q&A
2026-09-30
EPSS Evaluated
N/A
NVD
CVE-2026-94683
EUVD
EUVD-2026-89852

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
designsetgo designsetgo to 2.8.0 (inc)
designsetgo designsetgo to 2.8.1 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-502 The product deserializes untrusted data without sufficiently ensuring that the resulting data will be valid.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a PHP Object Injection vulnerability in the DesignSetGo WordPress plugin versions 2.8.0 and below. It allows attackers to manipulate data processing on the site and potentially execute harmful actions on the server by injecting malicious PHP objects.

Detection Guidance

Detecting this PHP Object Injection vulnerability requires checking if the DesignSetGo plugin version 2.8.0 or below is installed. Inspect WordPress installations for the plugin and verify its version. Use commands like 'wp plugin list' in WordPress CLI or check the plugin directory for version details.

Impact Analysis

Attackers could exploit this to take control of your website, steal data, or perform unauthorized actions. The high CVSS score of 8.8 indicates a significant risk, and mass-exploit campaigns may target unpatched sites.

Mitigation Strategies

Immediately update the DesignSetGo plugin to version 2.8.1 or later. If updating is not possible, apply the Patchstack mitigation rule to block attacks until the update is completed. Contact your hosting provider or web developer for assistance if needed.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-94683. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart