CVE-2026-65578 WordPress Agora theme <= 1.9 - PHP Object Injection vulnerability

Unauthenticated PHP Object Injection in Agora = 1.9 versions...

CVE-2026-65578

The CVE-2026-65578 entry describes an unauthenticated PHP Object Injection in the WordPress Agora theme versions up to 1.9. The vulnerability affects the Agora WordPress theme (≤ 1.9) and arises from a PHP object injection flaw, leading to potentially full system compromise without authentication...

WordPress Agora Theme <= 1.4.0 - Local File Inclusion Vulnerability

Local File Inclusion Vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Agora versions = 1.4.0...

WordPress Agora Theme <= 1.4.0 is vulnerable to Local File Inclusion

Software Agora Type Theme Vulnerable versions = 1.4.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2025-26592 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID 95d0e3653e12 Credits Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity...