BackPT-2026-132242CVE-2026-116865·Published2026-10-29·Updated2026-10-29GeneralReferences · 2Description byNVDCVSS 3.17.2HighMetricsAV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:HEditor PHP Object Injection in Zippy <= 1.7.0 versions.ExploitabilityFixImpactsDeserialization of Untrusted DataVendorsGesundheit Bewegt GmbhAffected productsZippyWeakness enumerationCWE-502: Deserialization of Untrusted DataRelated identifiersCVE-2026-116865 Found an issue in the description? Have something to add? Feel free to write us 👾 dbugs@ptsecurity.comReferences · 2 https://nvd.nist.gov/vuln/detail/CVE-2026-116865Security Note https://patchstack.com/database/wordpress/plugin/zippy/vulnerability/wordpress-zippy-plugin-1-7-0-php-object-injection-vulnerability?_s_id=cveNote