CVE-2026-112851

Deserialization of Untrusted Data vulnerability in ThemeREX Group HotLock hotlock allows Object Injection.This issue affects HotLock: from n/a through 1.3.9...

CVE-2026-112851 WordPress HotLock theme <= 1.3.9 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in ThemeREX Group HotLock hotlock allows Object Injection.This issue affects HotLock: from n/a through 1.3.9...

CVE-2026-112851 WordPress HotLock theme <= 1.3.9 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in ThemeREX Group HotLock hotlock allows Object Injection.This issue affects HotLock: from n/a through 1.3.9...

EUVD-2026-108950

Deserialization of Untrusted Data vulnerability in ThemeREX Group HotLock hotlock allows Object Injection.This issue affects HotLock: from n/a through 1.3.9...

CVE-2026-112851

The ThemeREX Group HotLock WordPress theme (versions n/a through 1.3.9 ) is vulnerable to a Deserialization of Untrusted Data vulnerability (CWE-502). This flaw allows for Object Injection , which can lead to significant security compromises. No specific exploitation details or remediation steps ...

ThemeREX HotLock deserialization injection vulnerability

ThemeREX HotLock versions 1.3.9 and earlier contain a deserialization injection vulnerability. This vulnerability arises from deserializing untrusted data, potentially leading to object injection...

WordPress HotLock theme <= 1.3.9 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme HotLock versions = 1.3.9...

PT-2026-122071

Name of the Vulnerable Software and Affected Versions HotLock versions prior to 1.4.0 Description ThemeREX Group HotLock allows PHP Object Injection due to the deserialization of untrusted data. This issue enables unauthenticated attackers to inject a PHP Object. While no POP chain a sequence of...

WordPress HotLock Theme <= 1.3.9 - Local File Inclusion Vulnerability

Local File Inclusion Vulnerability discovered by Bonds in WordPress Theme HotLock versions = 1.3.9...

WordPress HotLock Theme <= 1.3.9 is vulnerable to Local File Inclusion

Software HotLock Type Theme Vulnerable versions = 1.3.9 Fixed in N/A OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2025-26592 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID 457feca0b67b Credits Bonds Required privilege Unauthenticated Published ...