45064 matches found
EUVD-2026-37697
Unauthenticated PHP Object Injection in Château = 1.2.1 versions...
CVE-2026-49108 WordPress Moderno theme < 1.43 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Moderno 1.43 versions...
EUVD-2026-37698
Unauthenticated PHP Object Injection in Moderno 1.43 versions...
CVE-2026-49108 WordPress Moderno theme < 1.43 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Moderno 1.43 versions...
CVE-2026-49108
The CVE concerns WordPress Moderno theme versions prior to 1.43, where an unauthenticated PHP Object Injection vulnerability exists in the Moderno theme. The root cause is a PHP object injection flaw within the theme (exploitable without authentication). CVSS details indicate a critical impact (C...
CVE-2026-40757
The CVE concerns WordPress Château theme version
CVE-2026-40757 WordPress Château theme <= 1.2.1 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Château = 1.2.1 versions...
CVE-2026-40756 WordPress Zoya theme <= 1.4 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Zoya = 1.4 versions...
CVE-2026-40752 WordPress Manufaktur Solutions theme <= 1.1.1 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Manufaktur Solutions = 1.1.1 versions...
CVE-2026-40752 WordPress Manufaktur Solutions theme <= 1.1.1 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Manufaktur Solutions = 1.1.1 versions...
EUVD-2026-37695
Unauthenticated PHP Object Injection in Manufaktur Solutions = 1.1.1 versions...
CVE-2026-40756 WordPress Zoya theme <= 1.4 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Zoya = 1.4 versions...
EUVD-2026-37696
Unauthenticated PHP Object Injection in Zoya = 1.4 versions...
CVE-2026-40752
The WordPress Theme Manufaktur Solutions (versions
CVE-2026-40756
CVE-2026-40756 describes an unauthenticated PHP Object Injection in the WordPress Zoya theme (≤ 1.4). The underlying issue is in how PHP objects are handled in the theme, enabling crafted input to influence object deserialization. CVSS 3.1 base score 8.1 (HIGH) with network attack vector, high im...
EUVD-2026-37694
Unauthenticated PHP Object Injection in Eldon = 1.4.1 versions...
CVE-2026-40738
The CVE-2026-40738 entry concerns the WordPress Eldon theme (versions <= 1.4.1) with an unauthenticated PHP Object Injection vulnerability. Connected documents confirm the affected product (Eldon theme), the vulnerable component (PHP object deserialization paths in Eldon
CVE-2026-40738 WordPress Eldon theme <= 1.4.1 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Eldon = 1.4.1 versions...