CVE-2026-65497

WordPress Complianz plugin <= 7.5.0 - PHP Object Injection vulnerability

Administrator PHP Object Injection in Complianz <= 7.5.0 versions.

We have discovered 373,665 live websites that are affected by CVE-2026-65497.

Run a Free Instant Scan



Affected Software

Product  Complianz
Category Cookie compliance
Vulnerable Domains373,665 live websites (91% of Complianz install base)
Vulnerable Versions
  • from 0 through 7.5
Vulnerable Versions Count95 versions ( 85% of all versions)


Common Weakness Enumeration

CWE-502 Deserialization of Untrusted Data



Details

  • Published - Jul 23, 2026
  • Updated - Jul 23, 2026

Credits

  • Ananda Dhakal (Patchstack) | Patchstack Bug Bounty Program (finder)

Website Distribution by Country

Number of websites using CVE-2026-65497
United States29,856 websites


Germany99,456 websites
France43,803 websites
Spain37,068 websites
Italy27,982 websites
Netherlands18,104 websites
GB15,300 websites
Czech Republic13,028 websites
Austria9,453 websites
Belgium9,213 websites

Website Distribution by TLD

Number of websites using CVE-2026-65497
.com101,317 websites
.de75,747 websites
.fr22,174 websites
.it20,391 websites
.nl16,566 websites
.es15,335 websites
.cz12,381 websites
.co.uk9,901 websites
.at9,672 websites
.org9,228 websites

Vulnerable Versions

Vulnerable versions are highlighted in red

Websites affected by CVE-2026-65497

Top websites that are affected by CVE-2026-65497. Please click on the "Contact us" link to get more information.
DomainCountryRankContacts
****.net United States*,***
******.net United States*,***
*****.li United States*,***
*********.io Netherlands*,***
*********.com United States*,***
*************.org United States*,***
************.org France*,***
***********.com United States*,***
***********************.de Germany**,***
***********.com GB**,***
See full domain list

FAQ

CVE-2026-65497 is Deserialization of Untrusted Data in Complianz
A total of 373,665 websites have been identified as vulnerable to CVE-2026-65497, based on global website indexing conducted by WebTechSurvey.
The Complianz is affected by the CVE-2026-65497 vulnerability.
Complianz versions up to and including 7.5 are vulnerable to CVE-2026-65497.