Monitor vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.8

WordPress Tickera plugin <= 3.6.0.2 - PHP Object Injection vulnerability

CVE-2026-82226 · published 3 days ago
Summary

Unauthenticated PHP Object Injection in Tickera <= 3.6.0.2 versions.

What to do
  • Update tickera tickera to version 3.6.0.3.
Affected software
VendorProductAffected versions
tickera tickera <= 3.6.0.2
Fix: upgrade to 3.6.0.3
Original advisory text
WordPress Tickera plugin <= 3.6.0.2 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Tickera <= 3.6.0.2 versions.
References
Severity
9.8 Critical
CVSS 3.1: 9.8 (MITRE)
Exploitation
EPSS <1%
Type
CWE-502Deserialization of Untrusted Data
Timeline
Published31 Aug 2026
Updated2 Sep 2026
First seen31 Aug 2026
Sources
CVE-2026-82226 · NVD
CVE-2026-82226 · MITRE
Monitor software like this
Free during beta