Everything Cipher Insider has reported about deserialization: 3 stories, newest first. Part of our Vulnerabilities coverage.
A critical vulnerability in ThemeREX Smart Casa versions up to 1.0.12 allows attackers to inject objects via untrusted data deserialization.
A severe vulnerability in the IPharm plugin allows object injection, affecting versions up to 1.2.4 and requiring immediate attention from administrators.
The ThemeREX Hogwords plugin contains a severe flaw allowing object injection, affecting all versions up to 1.2.7 with a maximum severity score.