EUVD-2026-96493

Unauthenticated PHP Object Injection in WineShop = 3.20 versions...

CVE-2026-62090

The WineShop WordPress theme (versions

CVE-2026-62090 WordPress WineShop theme <= 3.20 - PHP Object Injection vulnerability

Unauthenticated PHP Object Injection in WineShop = 3.20 versions...

EUVD-2026-96492

Unauthenticated PHP Object Injection in Equadio = 1.1.4 versions...

CVE-2026-62087

The WordPress Equadio theme (versions

CVE-2026-62087 WordPress Equadio theme <= 1.1.4 - PHP Object Injection vulnerability

Unauthenticated PHP Object Injection in Equadio = 1.1.4 versions...

CVE-2026-62086

The WordPress Juno theme versions

CVE-2026-62086 WordPress Juno theme <= 2.25 - PHP Object Injection vulnerability

Unauthenticated PHP Object Injection in Juno = 2.25 versions...

EUVD-2026-96491

Unauthenticated PHP Object Injection in Juno = 2.25 versions...

CVE-2026-62077 WordPress Avala theme <= 1.1.4 - PHP Object Injection vulnerability

Unauthenticated PHP Object Injection in Avala = 1.1.4 versions...

EUVD-2026-96489

Unauthenticated PHP Object Injection in Avala = 1.1.4 versions...

CVE-2026-62077

The Avala theme for WordPress (versions

EUVD-2026-96488

Unauthenticated PHP Object Injection in Kalles = 1.1.7.1 versions...

CVE-2026-62076 WordPress Kalles theme <= 1.1.7.1 - PHP Object Injection vulnerability

Unauthenticated PHP Object Injection in Kalles = 1.1.7.1 versions...

CVE-2026-62076

The WordPress Kalles theme (versions

EUVD-2026-96478

Unauthenticated PHP Object Injection in Yacht Rental = 2.6 versions...

CVE-2026-62054 WordPress Yacht Rental theme <= 2.6 - PHP Object Injection vulnerability

Unauthenticated PHP Object Injection in Yacht Rental = 2.6 versions...

CVE-2026-62054

The WordPress Yacht Rental theme versions

CVE-2026-62053 WordPress Wine House theme <= 3.20 - PHP Object Injection vulnerability

Unauthenticated PHP Object Injection in Wine House = 3.20 versions...

CVE-2026-62053

The Wine House theme for WordPress versions 3.20 and below is susceptible to an unauthenticated PHP Object Injection vulnerability (CWE-502). This flaw allows for the deserialization of untrusted data , which can lead to a CRITICAL impact on confidentiality, integrity, and availability. Specific ...