8528 matches found
CVE-2026-40738
The CVE-2026-40738 entry concerns the WordPress Eldon theme (versions <= 1.4.1) with an unauthenticated PHP Object Injection vulnerability. Connected documents confirm the affected product (Eldon theme), the vulnerable component (PHP object deserialization paths in Eldon
CVE-2026-40738 WordPress Eldon theme <= 1.4.1 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Eldon = 1.4.1 versions...
EUVD-2026-37693
Unauthenticated PHP Object Injection in ShiftUp = 1.3 versions...
CVE-2026-40733 WordPress ShiftUp theme <= 1.3 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in ShiftUp = 1.3 versions...
CVE-2026-40733
CVE-2026-40733 – Unauthenticated PHP Object Injection in WordPress ShiftUp theme versions
EUVD-2026-37689
Unauthenticated PHP Object Injection in Hiroshi = 1.5.1 versions...
CVE-2026-39560 WordPress Hiroshi theme <= 1.5.1 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Hiroshi = 1.5.1 versions...
CVE-2026-39576 WordPress SingleMalt theme <= 1.5 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in SingleMalt = 1.5 versions...
EUVD-2026-37690
Unauthenticated PHP Object Injection in SingleMalt = 1.5 versions...
CVE-2026-39576
The CVE describes an unauthenticated PHP Object Injection vulnerability in WordPress theme SingleMalt, version
CVE-2026-39560
CVE-2026-39560 affects WordPress Hiroshi theme
CVE-2026-39556 WordPress Konsept theme <= 1.9 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Konsept = 1.9 versions...
EUVD-2026-37687
Unauthenticated PHP Object Injection in Konsept = 1.9 versions...
CVE-2026-39556
The CVE describes an unauthenticated PHP Object Injection vulnerability in WordPress Konsept theme versions <= 1.9. The root cause is an object injection flaw in Konsept
EUVD-2026-37684
Unauthenticated PHP Object Injection in PressMart = 1.2.26 versions...
CVE-2026-39442 WordPress PressMart theme <= 1.2.26 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in PressMart = 1.2.26 versions...
EUVD-2026-37685
Unauthenticated PHP Object Injection in Alukas 3.0.0 versions...
CVE-2026-39445 WordPress Alukas theme < 3.0.0 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Alukas 3.0.0 versions...
CVE-2026-39442
CVE-2026-39442 affects WordPress PressMart theme versions up to 1.2.26, where an unauthenticated PHP Object Injection vulnerability exists in the theme’s handling of objects. The underlying issue is PHP object injection, enabling an attacker to manipulate serialized objects and potentially execut...