ChangeIntel IT change radar

Public mode

No access to your tenant or devices. Every item links to its source. What this means

CVE-2026-100511

WordPress VK Google Job Posting Manager plugin <= 1.3.1 - PHP Object Injection vulnerability

CVSS 3.1 8.8 HIGHCheck source for fixed versionsKEV status unknown

Original advisory

Historical advisory recorded 23 Oct 2026 15:48:27 UTC. Read the latest advisory.

cve-program · CVE-2026-100511

Published

Deserialization of Untrusted Data vulnerability in Vektor Inc. VK Google Job Posting Manager vk-google-job-posting-manager allows Object Injection.This issue affects VK Google Job Posting Manager: from n/a through 1.3.1.

Read the publisher's advisory

Affected versions, risk and source history

cve-program · CVE-2026-100511

Published

WordPress VK Google Job Posting Manager plugin <= 1.3.1 - PHP Object Injection vulnerability

Source published: 5 Oct 2026 19:00:11 UTC
Source modified: 6 Oct 2026 10:41:50 UTC
Saved here: 23 Oct 2026 15:48:27 UTC
Source terms: CVE Program Terms of Use

Original source record · Cite this exact observation · Complete original publisher JSON

Source: cve-program · CVE Program Terms of Use. The publisher's wording is preserved. ChangeIntel groups the information and labels changes. The JSON record includes additional source fields.

CVSS 3.1 · 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H