CVE-2026-116391: WordPress GS Logo Slider plugin <= 3.8.9 - PHP Object Injection vulnerability

Q: What level of access does an attacker need to exploit this issue?

The vulnerability is rated PR:L, indicating that an attacker needs low-level privileges. It does not require user interaction and can be exploited over the network.

Q: What is the potential impact if exploitation succeeds?

The assigned CVSS vector indicates high impact to confidentiality, integrity, and availability. Successful exploitation could expose data, alter data, or disrupt the affected site.

Q: Which plugin versions are affected?

GS Logo Slider versions through 3.8.9 are affected. The available information does not identify a fixed version.

Published Oct 28, 2026

Updated

Deserialization of Untrusted Data vulnerability in GS Plugins GS Logo Slider gs-logo-slider allows Object Injection.This issue affects GS Logo Slider: from n/a through 3.8.9.

Affected Software

1 affected component

GS Plugins GS Logo Slider<=3.8.9

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade WordPress GS Logo Slider (gs-logo-slider) to a version that resolves this vulnerability.
Fixed in 3.9.0

Event History

Oct 28, 2026

CVE Published

via MITRE·01:00 PM

Data Sourced

via MITRE·01:00 PM

RemedyDescriptionSeverityWeakness

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

The vulnerability is rated PR:L, indicating that an attacker needs low-level privileges. It does not require user interaction and can be exploited over the network.

What is the potential impact if exploitation succeeds?

The assigned CVSS vector indicates high impact to confidentiality, integrity, and availability. Successful exploitation could expose data, alter data, or disrupt the affected site.

Which plugin versions are affected?

GS Logo Slider versions through 3.8.9 are affected. The available information does not identify a fixed version.

CVE-2026-116391: WordPress GS Logo Slider plugin <= 3.8.9 - PHP Object Injection vulnerability

Affected Software

Remediation

Event History

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

What is the potential impact if exploitation succeeds?

Which plugin versions are affected?

Company

Resources

Contact

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

What is the potential impact if exploitation succeeds?

Which plugin versions are affected?