Live › vulnerability › CVE-2026-110370
Go to dashboardThe GS Pins for Pinterest WordPress plugin deserializes untrusted data, which allows PHP object injection. Depending on available gadget chains on the site, an attacker may be able to run code or alter data on the server.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
No product ranges from the sources yet.
Check the installed plugin version in the WordPress admin Plugins page or the plugin's readme; versions through 1.9.2 are affected.
Update GS Pins for Pinterest to a version later than 1.9.2 or remove the plugin; no fixed version is named in the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Deserialization of Untrusted Data vulnerability in GS Plugins GS Pins for Pinterest gs-pinterest-portfolio allows Object Injection.This issue affects GS Pins for Pinterest: from n/a through 1.9.2.
This page as .md · .json · in your agent: get_signal("CVE-2026-110370")
NVD data is provided by NIST and is public domain · EPSS scores by FIRST, used with attribution. Posts quoted belong to their authors.