CVE-2026-104932 | johnny5 Search Regex Plugin up to 3.5 on WordPress replace_all deserialization

October 16, 2026 Yanac

A vulnerability classified as critical was found in johnny5 Search Regex Plugin up to 3.5 on WordPress. The impacted element is the function replace_all. Executing a manipulation can lead to deserialization.

This vulnerability is registered as CVE-2026-104932. It is possible to launch the attack remotely. No exploit is available.VulDB Recent EntriesRead More