CVE-2026-59521 | ShapedPlugin Real Testimonials Plugin up to 3.1.15 on WordPress Object Injection deserialization

July 13, 2026 Yanac

A vulnerability identified as critical has been detected in ShapedPlugin Real Testimonials Plugin up to 3.1.15 on WordPress. This impacts an unknown function of the component Object Injection Handler. This manipulation causes deserialization.

The identification of this vulnerability is CVE-2026-59521. It is possible to initiate the attack remotely. There is no exploit available.VulDB Recent EntriesRead More