Vulnerabilities
Stop Java Deserialization Attacks: The Real Prevention Hierarchy
Blocking specific classes fails because attackers write custom payloads; you must block the deserialization process entirely at the entry point.
deserialization
Everything DataSafe Radar has reported about deserialization: 3 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
Vulnerabilities
ThemeREX Partiso WordPress Theme Vulnerable to Critical Deserialization Attack
A CVSS 9.8 flaw in the Partiso theme allows object injection through untrusted data deserialization in versions prior to 1.1.13.
Vulnerabilities
Hogwords Object Injection: Critical CVE-2026-93938 Threatens WordPress Sites on Version 1.2.7 or Earlier
A critical vulnerability in the Hogwords plugin allows object injection, posing severe risks to WordPress sites running version 1.2.7 or earlier.