Advisories · Technology

crossi72 Phoenix Media Rename.

Every CVE that names crossi72 Phoenix Media Rename among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-116389 CVE record

CVSS 8.8 High

WordPress Phoenix Media Rename plugin <= 3.13.5 - PHP Object Injection vulnerability
- crossi72 Phoenix Media Rename
- Insecure deserialization
Not analysed yet 28 Oct 2026