CVE-2026-42719: Sarah Giles Dynamic User Directory

Critical severity, CVSS 9.8.

Subscriber PHP Object Injection in Dynamic User Directory <= 2.4 versions.

Affected products

• Sarah Giles Dynamic User Directory: up to and including 2.4

Published 2026-10-10. Last modified 2026-10-10.