Patch Forecast
Amber warning
Patch this week.

CVE-2026-78527

Contributor PHP Object Injection in GS Testimonial Slider <= 3.3.10 versions.

Risk score
63/100
CVSS
8.8 v3.1
Published
30 Oct 2026

Open in the live forecast Today's forecast

What to know

What it is
A high-severity PHP Object Injection vulnerability affects GS Testimonial Slider versions up to 3.3.10, allowing an attacker to potentially inject malicious PHP code, leading to code execution, data tampering, and arbitrary code execution.
Affected
{'products': ['GS Testimonial Slider'], 'packages': [], 'versions': ['<= 3.3.10']}
Fix
Upgrade to a version greater than 3.3.10
Exploitation
No known exploitation

Why it is Amber

  • CVSS 8.8 high
  • On your watchlist: php

References

Original description

Contributor PHP Object Injection in GS Testimonial Slider <= 3.3.10 versions.

Last activity 30 Oct 2026. Patch Forecast updates every hour.