CVE-2026-10035 | Weaverme Turnkey bbPress Plugin up to 1.7.1 on WordPress Settings Restore wvrbbp_set_to_serialized_values deserialization

August 16, 2026 Yanac

A vulnerability was found in Weaverme Turnkey bbPress Plugin up to 1.7.1 on WordPress. It has been classified as problematic. Affected by this issue is the function wvrbbp_set_to_serialized_values of the component Settings Restore Handler. Performing a manipulation results in deserialization.

This vulnerability is known as CVE-2026-10035. Remote exploitation of the attack is possible. No exploit is available.VulDB Recent EntriesRead More