CVE-2026-39576 WordPress SingleMalt theme <= 1.5 - PHP Object Injection vulnerability

Unauthenticated PHP Object Injection in SingleMalt = 1.5 versions...

CVE-2026-39560

CVE-2026-39560 affects WordPress Hiroshi theme

EUVD-2026-37687

Unauthenticated PHP Object Injection in Konsept = 1.9 versions...

CVE-2026-39556 WordPress Konsept theme <= 1.9 - PHP Object Injection vulnerability

Unauthenticated PHP Object Injection in Konsept = 1.9 versions...

CVE-2026-39556 WordPress Konsept theme <= 1.9 - PHP Object Injection vulnerability

Unauthenticated PHP Object Injection in Konsept = 1.9 versions...

CVE-2026-39556

The CVE describes an unauthenticated PHP Object Injection vulnerability in WordPress Konsept theme versions &lt;= 1.9. The root cause is an object injection flaw in Konsept

CVE-2026-39442 WordPress PressMart theme <= 1.2.26 - PHP Object Injection vulnerability

Unauthenticated PHP Object Injection in PressMart = 1.2.26 versions...

EUVD-2026-37684

Unauthenticated PHP Object Injection in PressMart = 1.2.26 versions...

CVE-2026-39442

CVE-2026-39442 affects WordPress PressMart theme versions up to 1.2.26, where an unauthenticated PHP Object Injection vulnerability exists in the theme’s handling of objects. The underlying issue is PHP object injection, enabling an attacker to manipulate serialized objects and potentially execut...

CVE-2026-39445 WordPress Alukas theme < 3.0.0 - PHP Object Injection vulnerability

Unauthenticated PHP Object Injection in Alukas 3.0.0 versions...

CVE-2026-39442 WordPress PressMart theme <= 1.2.26 - PHP Object Injection vulnerability

Unauthenticated PHP Object Injection in PressMart = 1.2.26 versions...

EUVD-2026-37685

Unauthenticated PHP Object Injection in Alukas 3.0.0 versions...

CVE-2026-39445

Affected: WordPress theme Alukas prior to v3.0.0. Vulnerability: PHP Object Injection in versions

CVE-2026-39445 WordPress Alukas theme < 3.0.0 - PHP Object Injection vulnerability

Unauthenticated PHP Object Injection in Alukas 3.0.0 versions...

CVE-2025-69127 WordPress Plumbing theme <= 1.6 - PHP Object Injection vulnerability

Unauthenticated PHP Object Injection in Plumbing = 1.6 versions...

CVE-2025-69130 WordPress Entrepreneur - Booking for Small Businesses WordPress Theme theme < 3.1.5 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in Pixel Makers Creative INC. Entrepreneur - Booking for Small Businesses WordPress Theme allows Object Injection. This issue affects Entrepreneur - Booking for Small Businesses WordPress Theme: from n/a before 3.1.5...

CVE-2025-69127

CVE-2025-69127 affects the WordPress theme “Plumbing - Plumber and Handyman WordPress Theme” (Plumbing) &lt;= 1.6. Description: Unauthenticated PHP Object Injection in Plumbing &lt;= 1.6. The available document set provides limited public details beyond the vulnerability type and affected version...

CVE-2025-69130 WordPress Entrepreneur - Booking for Small Businesses WordPress Theme theme < 3.1.5 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in Pixel Makers Creative INC. Entrepreneur - Booking for Small Businesses WordPress Theme allows Object Injection. This issue affects Entrepreneur - Booking for Small Businesses WordPress Theme: from n/a before 3.1.5...

CVE-2025-69127 WordPress Plumbing theme <= 1.6 - PHP Object Injection vulnerability

Unauthenticated PHP Object Injection in Plumbing = 1.6 versions...

CVE-2025-69130

The CVE-2025-69130 entry concerns the WordPress Entrepreneur - Booking for Small Businesses WordPress Theme (versions