5 matches found
EUVD-2026-96197
Deserialization of Untrusted Data vulnerability in ThemeREX Group Smart Casa smart-casa allows Object Injection.This issue affects Smart Casa: from n/a through 1.0.12...
CVE-2026-93932
The Smart Casa WordPress theme, developed by ThemeREX Group , is vulnerable to a PHP Object Injection flaw in versions 1.0.12 and below. This vulnerability stems from the deserialization of untrusted data , which could allow an attacker to execute arbitrary code or manipulate application logic. T...
WordPress Smart Casa theme <= 1.0.12 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by Bonds in WordPress Theme Smart Casa versions = 1.0.12...
WordPress Smart Casa Theme <= 1.0.11 - Local File Inclusion Vulnerability
Local File Inclusion Vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Smart Casa versions = 1.0.11...
WordPress Smart Casa Theme <= 1.0.11 is vulnerable to Local File Inclusion
Software Smart Casa Type Theme Vulnerable versions = 1.0.11 Fixed in N/A OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2025-26592 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID fbd7731da0a1 Credits Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity...