EUVD-2026-108950

Deserialization of Untrusted Data vulnerability in ThemeREX Group HotLock hotlock allows Object Injection.This issue affects HotLock: from n/a through 1.3.9...

CVE-2026-112851

The ThemeREX Group HotLock WordPress theme (versions n/a through 1.3.9 ) is vulnerable to a Deserialization of Untrusted Data vulnerability (CWE-502). This flaw allows for Object Injection , which can lead to significant security compromises. No specific exploitation details or remediation steps ...

CVE-2026-112846

The Save Life WordPress theme by ThemeREX Group (versions $\le$ 1.2.14 ) is vulnerable to a PHP Object Injection flaw. This issue stems from the Deserialization of Untrusted Data , which allows an attacker to inject objects into the application. The vulnerability results in a CRITICAL severity im...

CVE-2026-112852

The WordPress Helion theme (versions

CVE-2026-112852 WordPress Helion theme <= 1.1.12 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in ThemeREX Group Helion helion allows Object Injection.This issue affects Helion: from n/a through 1.1.12...

CVE-2026-112846 WordPress Save Life theme <= 1.2.14 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in ThemeREX Group Save Life save-life allows Object Injection.This issue affects Save Life: from n/a through 1.2.14...

CVE-2026-112851 WordPress HotLock theme <= 1.3.9 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in ThemeREX Group HotLock hotlock allows Object Injection.This issue affects HotLock: from n/a through 1.3.9...

CVE-2026-112853 WordPress Hallelujah theme <= 1.1.1 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in axiomthemes Hallelujah hallelujah allows Object Injection.This issue affects Hallelujah: from n/a through 1.1.1...

EUVD-2026-108951

Deserialization of Untrusted Data vulnerability in ThemeREX Group Save Life save-life allows Object Injection.This issue affects Save Life: from n/a through 1.2.14...

EUVD-2026-108944

Deserialization of Untrusted Data vulnerability in ThemeREX Group Little Birdies little-birdies allows Object Injection.This issue affects Little Birdies: from n/a through 1.3.16...

CVE-2026-112859

The Little Birdies WordPress theme by ThemeREX Group is vulnerable to a PHP Object Injection flaw due to the deserialization of untrusted data . This vulnerability affects versions up to and including 1.3.16 . Successful exploitation can lead to significant impacts on confidentiality, integrity, ...

EUVD-2026-108945

Deserialization of Untrusted Data vulnerability in axiomthemes Rhodos rhodos allows Object Injection.This issue affects Rhodos: from n/a through 1.3.3...

EUVD-2026-108946

Deserialization of Untrusted Data vulnerability in axiomthemes Reprizo reprizo allows Object Injection.This issue affects Reprizo: from n/a through 1.0.8...

EUVD-2026-108947

Deserialization of Untrusted Data vulnerability in ThemeREX Group Vagabonds vagabonds allows Object Injection.This issue affects Vagabonds: from n/a through 1.3.10...

CVE-2026-112856

The ThemeREX Group Vagabonds theme (versions up to and including 1.3.10 ) is vulnerable to a PHP Object Injection flaw due to the Deserialization of Untrusted Data . This vulnerability allows an attacker to inject objects, potentially leading to unauthorized code execution or system manipulation....

CVE-2026-112856 WordPress Vagabonds theme <= 1.3.10 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in ThemeREX Group Vagabonds vagabonds allows Object Injection.This issue affects Vagabonds: from n/a through 1.3.10...

CVE-2026-112858 WordPress Rhodos theme <= 1.3.3 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in axiomthemes Rhodos rhodos allows Object Injection.This issue affects Rhodos: from n/a through 1.3.3...

CVE-2026-112859 WordPress Little Birdies theme <= 1.3.16 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in ThemeREX Group Little Birdies little-birdies allows Object Injection.This issue affects Little Birdies: from n/a through 1.3.16...

CVE-2026-112857

The axiomthemes Reprizo WordPress theme (versions

CVE-2026-112858

The axiomthemes Rhodos WordPress theme (versions ≤ 1.3.3 ) is vulnerable to a PHP Object Injection flaw caused by the deserialization of untrusted data . This vulnerability allows an attacker to perform Object Injection , which can lead to high impact on confidentiality, integrity, and availabili...