CVE-2026-62086

The WordPress Juno theme versions

CVE-2026-62086 WordPress Juno theme <= 2.25 - PHP Object Injection vulnerability

Unauthenticated PHP Object Injection in Juno = 2.25 versions...

EUVD-2026-96489

Unauthenticated PHP Object Injection in Avala = 1.1.4 versions...

CVE-2026-62077

The Avala theme for WordPress (versions

CVE-2026-62077 WordPress Avala theme <= 1.1.4 - PHP Object Injection vulnerability

Unauthenticated PHP Object Injection in Avala = 1.1.4 versions...

EUVD-2026-96488

Unauthenticated PHP Object Injection in Kalles = 1.1.7.1 versions...

CVE-2026-62076

The WordPress Kalles theme (versions

CVE-2026-62076 WordPress Kalles theme <= 1.1.7.1 - PHP Object Injection vulnerability

Unauthenticated PHP Object Injection in Kalles = 1.1.7.1 versions...

EUVD-2026-96478

Unauthenticated PHP Object Injection in Yacht Rental = 2.6 versions...

CVE-2026-62054

The WordPress Yacht Rental theme versions

CVE-2026-62054 WordPress Yacht Rental theme <= 2.6 - PHP Object Injection vulnerability

Unauthenticated PHP Object Injection in Yacht Rental = 2.6 versions...

EUVD-2026-96477

Unauthenticated PHP Object Injection in Wine House = 3.20 versions...

CVE-2026-62053

The Wine House theme for WordPress versions 3.20 and below is susceptible to an unauthenticated PHP Object Injection vulnerability (CWE-502). This flaw allows for the deserialization of untrusted data , which can lead to a CRITICAL impact on confidentiality, integrity, and availability. Specific ...

CVE-2026-62053 WordPress Wine House theme <= 3.20 - PHP Object Injection vulnerability

Unauthenticated PHP Object Injection in Wine House = 3.20 versions...

CVE-2026-62052

The Tipsy theme for WordPress (versions

EUVD-2026-96476

Unauthenticated PHP Object Injection in Tipsy = 1.6 versions...

CVE-2026-62052 WordPress Tipsy theme <= 1.6 - PHP Object Injection vulnerability

Unauthenticated PHP Object Injection in Tipsy = 1.6 versions...

EUVD-2026-96474

Unauthenticated PHP Object Injection in Splendour = 1.23 versions...

EUVD-2026-96475

Unauthenticated PHP Object Injection in Stargaze = 1.10 versions...

CVE-2026-62050

The Splendour WordPress theme, version 1.23 and below , is vulnerable to an unauthenticated PHP Object Injection (CWE-502). This flaw allows a remote attacker to achieve high-impact consequences regarding confidentiality, integrity, and availability. No specific remediation or exploit details are...