4 matches found
CVE-2026-62010
The Avventure WordPress theme, version 1.1.12 and below , is susceptible to an unauthenticated PHP Object Injection vulnerability (CWE-502). This flaw allows for the deserialization of untrusted data, potentially leading to significant impact on confidentiality, integrity, and availability. Explo...
WordPress Avventure theme <= 1.1.12 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by johska in WordPress Theme Avventure versions = 1.1.12...
CVE-2026-27991 WordPress Avventure theme <= 1.1.12 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in ThemeREX Avventure avventure allows PHP Local File Inclusion.This issue affects Avventure: from n/a through = 1.1.12...