Live › vulnerability › CVE-2026-110369
Go to dashboardThe GS Team Members WordPress plugin unsafely deserializes untrusted data, which is a PHP object injection flaw. Per the sources, an attacker can use it to run code or take over the site, though the exact trigger is not described.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
No product ranges from the sources yet.
2.8.2 are affected2.8.2Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Deserialization of Untrusted Data vulnerability in GS Plugins WordPress Team Members – GS Plugins gs-team-members allows Object Injection.This issue affects WordPress Team Members – GS Plugins: from n/a through 2.8.2.
This page as .md · .json · in your agent: get_signal("CVE-2026-110369")
NVD data is provided by NIST and is public domain · EPSS scores by FIRST, used with attribution. Posts quoted belong to their authors.