CVE-2026-49108

Unauthenticated PHP Object Injection in Moderno 1.43 versions...

CVE-2026-49108

The CVE concerns WordPress Moderno theme versions prior to 1.43, where an unauthenticated PHP Object Injection vulnerability exists in the Moderno theme. The root cause is a PHP object injection flaw within the theme (exploitable without authentication). CVSS details indicate a critical impact (C...

EUVD-2026-37698

Unauthenticated PHP Object Injection in Moderno 1.43 versions...

WordPress Moderno theme < 1.43 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme Moderno versions 1.43...