CVE-2026-66567

The Anesta WordPress theme (versions ≤ 1.5.3 ) is susceptible to an unauthenticated PHP Object Injection vulnerability (CWE-502). The flaw allows for the deserialization of untrusted data , which could lead to high impact on confidentiality, integrity, and availability. No specific exploitation d...

WordPress Anesta theme <= 1.5.3 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme Anesta versions = 1.5.3...

WordPress Anesta Theme <= 1.2.1 - Local File Inclusion Vulnerability

Local File Inclusion Vulnerability discovered by Bonds in WordPress Theme Anesta versions = 1.2.1...

WordPress Anesta Theme <= 1.2.1 is vulnerable to Local File Inclusion

Software Anesta Type Theme Vulnerable versions = 1.2.1 Fixed in N/A OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2025-26592 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID f2fff1320acd Credits Bonds Required privilege Unauthenticated Published 8...