CVE-2026-66567 WordPress Anesta theme <= 1.5.3 - PHP Object Injection vulnerability

Unauthenticated PHP Object Injection in Anesta = 1.5.3 versions...

CVE-2026-66567

The Anesta WordPress theme (versions ≤ 1.5.3 ) is susceptible to an unauthenticated PHP Object Injection vulnerability (CWE-502). The flaw allows for the deserialization of untrusted data , which could lead to high impact on confidentiality, integrity, and availability. No specific exploitation d...

CVE-2026-66565

The WordPress FC United theme versions

CVE-2026-66563

The WordPress Windsor theme (versions

CVE-2026-62123 WordPress Invetex theme <= 2.18 - PHP Object Injection vulnerability

Unauthenticated PHP Object Injection in Invetex = 2.18 versions...

CVE-2026-62124 WordPress N7 | Golf Club Sports & Events theme <= 2.21 - PHP Object Injection vulnerability

Unauthenticated PHP Object Injection in N7 | Golf Club Sports & Events = 2.21 versions...

CVE-2026-62100 WordPress KuteShop theme <= 4.2.9 - Reflected Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in KuteShop = 4.2.9 versions...

CVE-2026-62099 WordPress Boutique theme <= 2.3.3 - Local File Inclusion vulnerability

Unauthenticated Local File Inclusion in Boutique = 2.3.3 versions...

CVE-2026-62098

The WordPress Boutique theme (versions

CVE-2026-62098 WordPress Boutique theme <= 2.3.3 - Arbitrary Shortcode Execution vulnerability

Unauthenticated Content Injection in Boutique = 2.3.3 versions...

CVE-2026-62095

The WordPress Biolife theme (versions

CVE-2026-62095 WordPress Biolife theme <= 3.2.3 - Reflected Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Biolife = 3.2.3 versions...

CVE-2026-62096

The Biolife theme for WordPress (versions

CVE-2026-62087 WordPress Equadio theme <= 1.1.4 - PHP Object Injection vulnerability

Unauthenticated PHP Object Injection in Equadio = 1.1.4 versions...

CVE-2026-62077 WordPress Avala theme <= 1.1.4 - PHP Object Injection vulnerability

Unauthenticated PHP Object Injection in Avala = 1.1.4 versions...

CVE-2026-62077

The Avala theme for WordPress (versions

CVE-2026-62075 WordPress Backhoe theme <= 2.0 - Local File Inclusion vulnerability

Unauthenticated Local File Inclusion in Backhoe = 2.0 versions...

CVE-2026-62076

The WordPress Kalles theme (versions

CVE-2026-62076 WordPress Kalles theme <= 1.1.7.1 - PHP Object Injection vulnerability

Unauthenticated PHP Object Injection in Kalles = 1.1.7.1 versions...

CVE-2026-62069 WordPress Fabius theme <= 1.0 - Local File Inclusion vulnerability

Unauthenticated Local File Inclusion in Fabius = 1.0 versions...