CVE-2026-32511

CVE-2026-32511 refers to a Deserialization of Untrusted Data vulnerability in Mikado-Themes Stål (WordPress Stål theme) that allows Object Injection. The issue affects Stål versions before 1.7. The root cause is deserializing untrusted data, enabling object instantiation through crafted input. Pu...

WordPress Stål theme < 1.7 - Arbitrary Object Instantiation vulnerability

Arbitrary Object Instantiation vulnerability discovered by Denver Jackson in WordPress Theme Stål versions 1.7...