CVE-2026-110370: WordPress GS Pins for Pinterest plugin <= 1.9.2 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in GS Plugins GS Pins for Pinterest gs-pinterest-portfolio allows Object Injection.This issue affects GS Pins for Pinterest: from n/a through 1.9.2.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
GS Pins for Pinterestto a version that resolves this vulnerability.Fixed in 1.9.3
Event History
Frequently Asked Questions
Which installations are affected?
GS Pins for Pinterest installations running version 1.9.2 or earlier are affected. The affected version range begins at an unspecified earlier version and extends through 1.9.2.
What level of access does an attacker need?
The CVSS vector indicates that an attacker needs low-level privileges to exploit the issue. Exploitation is network-accessible, requires no user interaction, and has low attack complexity.
What could successful exploitation allow?
Successful exploitation can affect confidentiality, integrity, and availability at a high level. The vulnerability is a PHP object injection issue caused by deserialization of untrusted data.