CVE-2026-62052

The Tipsy theme for WordPress (versions

EUVD-2026-96474

Unauthenticated PHP Object Injection in Splendour = 1.23 versions...

EUVD-2026-96475

Unauthenticated PHP Object Injection in Stargaze = 1.10 versions...

CVE-2026-62051 WordPress Stargaze theme <= 1.10 - PHP Object Injection vulnerability

Unauthenticated PHP Object Injection in Stargaze = 1.10 versions...

CVE-2026-62050 WordPress Splendour theme <= 1.23 - PHP Object Injection vulnerability

Unauthenticated PHP Object Injection in Splendour = 1.23 versions...

CVE-2026-62050

The Splendour WordPress theme, version 1.23 and below , is vulnerable to an unauthenticated PHP Object Injection (CWE-502). This flaw allows a remote attacker to achieve high-impact consequences regarding confidentiality, integrity, and availability. No specific remediation or exploit details are...

CVE-2026-62051

The Stargaze theme for WordPress (versions

EUVD-2026-96460

Subscriber PHP Object Injection in Angio = 1.1.1 versions...

CVE-2026-62021 WordPress Angio theme <= 1.1.1 - PHP Object Injection vulnerability

Subscriber PHP Object Injection in Angio = 1.1.1 versions...

CVE-2026-62021

The Angio theme for WordPress (versions

EUVD-2026-96453

Unauthenticated PHP Object Injection in CleanSkin = 1.5.0 versions...

CVE-2026-42723 WordPress CleanSkin theme <= 1.5.0 - PHP Object Injection vulnerability

Unauthenticated PHP Object Injection in CleanSkin = 1.5.0 versions...

CVE-2026-42723

The CleanSkin WordPress theme, versions

EUVD-2026-96451

Subscriber PHP Object Injection in Dynamic User Directory = 2.4 versions...

CVE-2026-42718 WordPress Booster for WooCommerce plugin <= 8.4.0 - PHP Object Injection vulnerability

Unauthenticated PHP Object Injection in Booster for WooCommerce = 8.4.0 versions...

CVE-2026-42719 WordPress Dynamic User Directory plugin <= 2.4 - PHP Object Injection vulnerability

Subscriber PHP Object Injection in Dynamic User Directory = 2.4 versions...

CVE-2026-42718

The Booster for WooCommerce WordPress plugin (versions

EUVD-2026-96450

Unauthenticated PHP Object Injection in Booster for WooCommerce = 8.4.0 versions...

CVE-2026-42719

The WordPress Dynamic User Directory plugin (versions

CVE-2026-42716 WordPress Payever - WooCommerce Gateway plugin <= 4.8.2 - PHP Object Injection vulnerability

Unauthenticated PHP Object Injection in Payever - WooCommerce Gateway = 4.8.2 versions...