Lucene search
+L

19 matches found

NVD
NVD
•added 2026/10/23 1:17 p.m.•12 views

CVE-2026-112846

Deserialization of Untrusted Data vulnerability in ThemeREX Group Save Life save-life allows Object Injection.This issue affects Save Life: from n/a through 1.2.14...

9.8CVSS0.00313EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/23 1:00 p.m.•32 views

CVE-2026-112846 WordPress Save Life theme <= 1.2.14 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in ThemeREX Group Save Life save-life allows Object Injection.This issue affects Save Life: from n/a through 1.2.14...

9.8CVSS0.00313EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/23 1:00 p.m.•15 views

EUVD-2026-108951

Deserialization of Untrusted Data vulnerability in ThemeREX Group Save Life save-life allows Object Injection.This issue affects Save Life: from n/a through 1.2.14...

9.8CVSS5.9AI score0.00313EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/23 1:00 p.m.•41 views

CVE-2026-112846

The Save Life WordPress theme by ThemeREX Group (versions $\le$ 1.2.14 ) is vulnerable to a PHP Object Injection flaw. This issue stems from the Deserialization of Untrusted Data , which allows an attacker to inject objects into the application. The vulnerability results in a CRITICAL severity im...

9.8CVSS5.9AI score0.00313EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/10/23 1:00 p.m.•8 views

CVE-2026-112846 WordPress Save Life theme <= 1.2.14 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in ThemeREX Group Save Life save-life allows Object Injection.This issue affects Save Life: from n/a through 1.2.14...

9.8CVSS5.9AI score0.00313EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/10/23 12:00 a.m.•9 views

ThemeREX Save Life deserialization injection vulnerability

ThemeREX Save Life versions 1.2.14 and earlier contain a deserialization injection vulnerability. This vulnerability arises from deserializing untrusted data, potentially leading to object injection...

9.8CVSS5.9AI score0.00313EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2026/10/21 11:52 a.m.•15 views

WordPress Save Life theme <= 1.2.14 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by johska in WordPress Theme Save Life versions = 1.2.14...

9.8CVSS5.9AI score0.00313EPSS
SaveExploits0Affected Software1
Positive Technologies
Positive Technologies
•added 2026/10/21 12:00 a.m.•15 views

PT-2026-122066

Name of the Vulnerable Software and Affected Versions Save Life versions prior to 1.2.15 Description Save Life is subject to PHP Object Injection due to the deserialization of untrusted data. This allows unauthenticated attackers to inject a PHP Object. While no native POP chain a sequence of...

9.8CVSS6.6AI score0.00313EPSS
SaveExploits0References7
RedhatCVE
RedhatCVE
•added 2026/03/06 7:54 a.m.•22 views

CVE-2026-28098

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in ThemeREX Save Life save-life allows PHP Local File Inclusion.This issue affects Save Life: from n/a through = 1.2.13...

8.1CVSS5.8AI score0.00473EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/03/05 6:30 a.m.•24 views

EUVD-2026-9753

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in ThemeREX Save Life save-life allows PHP Local File Inclusion.This issue affects Save Life: from n/a through = 1.2.13...

8.1CVSS5.9AI score0.00473EPSS
SaveExploits0References2
NVD
NVD
•added 2026/03/05 6:16 a.m.•27 views

CVE-2026-28098

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in ThemeREX Save Life save-life allows PHP Local File Inclusion.This issue affects Save Life: from n/a through = 1.2.13...

8.1CVSS0.00473EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/03/05 5:54 a.m.•15 views

CVE-2026-28098

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in ThemeREX Save Life save-life allows PHP Local File Inclusion.This issue affects Save Life: from n/a through = 1.2.13...

5.9AI score0.00473EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/03/05 5:54 a.m.•13 views

CVE-2026-28098 WordPress Save Life theme <= 1.2.13 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in ThemeREX Save Life save-life allows PHP Local File Inclusion.This issue affects Save Life: from n/a through = 1.2.13...

8.1CVSS5.8AI score0.00473EPSS
SaveExploits0References1
CVE
CVE
•added 2026/03/05 5:54 a.m.•42 views

CVE-2026-28098

CVE-2026-28098 is a Local File Inclusion vulnerability in the ThemeREX Save Life WordPress theme (versions up to 1.2.13). The issue arises from improper control of the filename used in PHP include/require statements, allowing an attacker to include local files. Public documentation consistently n...

8.1CVSS5.8AI score0.00473EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/03/05 5:54 a.m.•55 views

CVE-2026-28098 WordPress Save Life theme <= 1.2.13 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in ThemeREX Save Life save-life allows PHP Local File Inclusion.This issue affects Save Life: from n/a through = 1.2.13...

8.1CVSS0.00473EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/05 12:00 a.m.•11 views

CVE-2026-28098: Improper Control of Filename for Include/Require Statement in PHP Program

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in ThemeREX Save Life save-life allows PHP Local File Inclusion.This issue affects Save Life: from n/a through = 1.2.13...

8.1CVSS5.8AI score0.00473EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/03/05 12:00 a.m.•29 views

PT-2026-23373

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in ThemeREX Save Life save-life allows PHP Local File Inclusion.This issue affects Save Life: from n/a through = 1.2.13...

5.9AI score0.00473EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/03/05 12:00 a.m.•29 views

WordPress plugin Save Life has a security vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. WordPres...

8.1CVSS5.8AI score0.00473EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2026/02/27 7:50 a.m.•24 views

WordPress Save Life theme <= 1.2.13 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Bonds in WordPress Theme Save Life versions = 1.2.13...

8.1CVSS5.9AI score0.00473EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder