CVE-2026-22384
WordPress Applay - Shortcodes plugin <= 3.7 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in leafcolor Applay - Shortcodes applay-shortcodes allows Object Injection.This issue affects Applay - Shortcodes: from n/a through <= 3.7.
CVSS 3.1 · 9.8 Critical
EPSS < 1%
KEV · Not listed
Vendors
Products