45800 matches found
CVE-2025-60229 WordPress Lagom theme <= 2.0 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in Themeton Lagom allows Object Injection. This issue affects Lagom: from n/a through 2.0...
EUVD-2025-210243
Deserialization of Untrusted Data vulnerability in Themeton Lagom allows Object Injection. This issue affects Lagom: from n/a through 2.0...
CVE-2025-60229 WordPress Lagom theme <= 2.0 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in Themeton Lagom allows Object Injection. This issue affects Lagom: from n/a through 2.0...
CVE-2025-60229
The CVE concerns the WordPress Lagom theme (versions
CVE-2026-49108 WordPress Moderno theme < 1.43 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Moderno 1.43 versions...
CVE-2026-40757 WordPress Château theme <= 1.2.1 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Château = 1.2.1 versions...
EUVD-2026-37697
Unauthenticated PHP Object Injection in Château = 1.2.1 versions...
EUVD-2026-37698
Unauthenticated PHP Object Injection in Moderno 1.43 versions...
CVE-2026-40757 WordPress Château theme <= 1.2.1 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Château = 1.2.1 versions...
CVE-2026-49108 WordPress Moderno theme < 1.43 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Moderno 1.43 versions...
CVE-2026-40757
The CVE concerns WordPress Château theme version
CVE-2026-49108
The CVE concerns WordPress Moderno theme versions prior to 1.43, where an unauthenticated PHP Object Injection vulnerability exists in the Moderno theme. The root cause is a PHP object injection flaw within the theme (exploitable without authentication). CVSS details indicate a critical impact (C...
CVE-2026-40756 WordPress Zoya theme <= 1.4 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Zoya = 1.4 versions...
CVE-2026-40752 WordPress Manufaktur Solutions theme <= 1.1.1 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Manufaktur Solutions = 1.1.1 versions...
EUVD-2026-37695
Unauthenticated PHP Object Injection in Manufaktur Solutions = 1.1.1 versions...
EUVD-2026-37696
Unauthenticated PHP Object Injection in Zoya = 1.4 versions...
CVE-2026-40756 WordPress Zoya theme <= 1.4 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Zoya = 1.4 versions...
CVE-2026-40752 WordPress Manufaktur Solutions theme <= 1.1.1 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Manufaktur Solutions = 1.1.1 versions...
CVE-2026-40756
CVE-2026-40756 describes an unauthenticated PHP Object Injection in the WordPress Zoya theme (≤ 1.4). The underlying issue is in how PHP objects are handled in the theme, enabling crafted input to influence object deserialization. CVSS 3.1 base score 8.1 (HIGH) with network attack vector, high im...