359 matches found
CVE-2026-112855
Deserialization of Untrusted Data vulnerability in axiomthemes Redy redy allows Object Injection.This issue affects Redy: from n/a through 1.3.5...
CVE-2026-112858 WordPress Rhodos theme <= 1.3.3 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in axiomthemes Rhodos rhodos allows Object Injection.This issue affects Rhodos: from n/a through 1.3.3...
CVE-2026-112858
The axiomthemes Rhodos WordPress theme (versions ≤ 1.3.3 ) is vulnerable to a PHP Object Injection flaw caused by the deserialization of untrusted data . This vulnerability allows an attacker to perform Object Injection , which can lead to high impact on confidentiality, integrity, and availabili...
CVE-2026-112855 WordPress Redy theme <= 1.3.5 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in axiomthemes Redy redy allows Object Injection.This issue affects Redy: from n/a through 1.3.5...
CVE-2026-112855 WordPress Redy theme <= 1.3.5 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in axiomthemes Redy redy allows Object Injection.This issue affects Redy: from n/a through 1.3.5...
CVE-2026-112855
The axiomthemes Redy WordPress theme (versions
EUVD-2026-108943
Deserialization of Untrusted Data vulnerability in axiomthemes Redy redy allows Object Injection.This issue affects Redy: from n/a through 1.3.5...
PT-2026-122073
Deserialization of Untrusted Data vulnerability in axiomthemes Hallelujah hallelujah allows Object Injection.This issue affects Hallelujah: from n/a through 1.1.1...
PT-2026-122075
Name of the Vulnerable Software and Affected Versions Redy versions prior to 1.3.6 Description The Redy theme for WordPress allows PHP Object Injection due to the deserialization of untrusted data. This allows unauthenticated attackers to inject a PHP Object. While no POP chain a sequence of...
CVE-2026-93927
Deserialization of Untrusted Data vulnerability in Axiomthemes Veto veto allows Object Injection.This issue affects Veto: from n/a through 1.6.0...
EUVD-2026-96185
Deserialization of Untrusted Data vulnerability in Axiomthemes Balance balance allows Object Injection.This issue affects Balance: from n/a through 1.12.0...
CVE-2026-93945
The Axiomthemes Balance WordPress theme (versions
EUVD-2026-96201
Deserialization of Untrusted Data vulnerability in Axiomthemes Veto veto allows Object Injection.This issue affects Veto: from n/a through 1.6.0...
CVE-2026-93927
The Axiomthemes Veto WordPress theme (versions
PT-2026-109589
Name of the Vulnerable Software and Affected Versions Axiomthemes Balance versions prior to 1.12.1 Description The Axiomthemes Balance WordPress theme contains a flaw where it deserializes untrusted user-controlled data using the unserialize function. This allows for PHP object injection, where...
PT-2026-109573
Name of the Vulnerable Software and Affected Versions Veto versions prior to 1.6.0 Description Deserialization of untrusted data in Veto allows Object Injection, a technique where an attacker can manipulate serialized objects to execute arbitrary code or interfere with application logic...
CVE-2026-93927: Deserialization of Untrusted Data
Deserialization of Untrusted Data vulnerability in Axiomthemes Veto veto allows Object Injection.This issue affects Veto: from n/a through 1.6.0...
CVE-2026-57738
Deserialization of Untrusted Data vulnerability in axiomthemes 777 triple-seven allows Object Injection.This issue affects 777: from n/a through = 1.13.0...
CVE-2026-57738
CVE-2026-57738 affects WordPress Theme 777 (axiomthemes) up to version 1.13.0. The issue is a PHP object‑injection via deserialization of untrusted data in the 777 plugin/theme, enabling arbitrary object injection with high impact (CVSS 3.1: 9.8, Network attack, no user interaction). Connected so...