CVE-2026-65576

CVE-2026-65576 affects WordPress Adrena theme <= 1.2.14. The issue is unauthenticated PHP Object Injection in the theme code, enabling high-impact impact per CVSS 3.1 metrics (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). The connected sources confirm the vulnerability exists in Adrena

CVE-2026-65576 WordPress Adrena theme <= 1.2.14 - PHP Object Injection vulnerability

Unauthenticated PHP Object Injection in Adrena = 1.2.14 versions...

WordPress Adrena Theme <= 1.2.13 - Local File Inclusion Vulnerability

Local File Inclusion Vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Adrena versions = 1.2.13...

WordPress Adrena Theme <= 1.2.13 is vulnerable to Local File Inclusion

Software Adrena Type Theme Vulnerable versions = 1.2.13 Fixed in N/A OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2025-26592 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID fee2bf7593ad Credits Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity...