{"uuid": "950aeb53-f779-4821-ac0f-7a5f5322be46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-0551", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117144002488360739", "content": "CVE-2026-0551: HIGH severity deserialization vulnerability in buildwps PPWP \u2013 Password Protect Pages (<=1.9.18). Contributor+ users can inject PHP objects if a POP chain exists in other plugins/themes. Review access & patch status. https://radar.offseq.com/threat/cve-2026-0551-cwe-502-deserialization-of-untrusted-data-in-buildwps-ppwp-password-protect-pages-dde9c11a2d958ff8 #OffSeq #WordPress #Vuln", "creation_timestamp": "2026-08-23T09:00:24.629666Z"}