These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.
The Buzz Stone | Magazine & Viral Blog WordPress Theme versions <= 1.0.2 is vulnerable to Unauthenticated PHP Object Injection, a critical vulnerability with a CVSS score of 9.8. This vulnerability allows unauthenticated attackers to inject malicious PHP objects, potentially leading to severe operational impacts. Defenders should verify exposure and prioritize remediation for WordPress installations using [truncated]
A critical vulnerability was found in the Photolia theme, version 1.0.3 or earlier, allowing unauthenticated PHP object injection. This issue has a CVSS score of 9.8 and is considered critical.
The Jacqueline theme versions <= 2.22 has an unauthenticated PHP Object Injection vulnerability, allowing potential code execution on vulnerable systems and possible data breaches. Defenders responsible for WordPress installations using the Jacqueline theme should assess exposure and prioritize remediation. The vulnerability has a CVSS score of 9.8 and is considered critical, requiring immediate attention [truncated]
The Alliance theme versions <= 3.11 is vulnerable to Unauthenticated PHP Object Injection. This vulnerability allows for potential code execution, data breaches, and system compromise if not patched. Defenders responsible for Alliance theme installations should assess exposure and prioritize patching or mitigations. The CVE record and NVD entry provide limited information about the vulnerability, so verif [truncated]
CVE-2026-66564 is a critical unauthenticated PHP object injection vulnerability in ShiftCV version 3.0.14 and earlier. Defenders should assess exposure, prioritize remediation, and verify inventory for potential impact.
A critical vulnerability was found in the Windsor theme for WordPress, affecting versions up to 2.10. The vulnerability allows unauthenticated PHP object injection, which could lead to severe consequences if exploited.
The Education Center theme versions <= 3.6.12 is vulnerable to Unauthenticated PHP Object Injection, a critical vulnerability that could allow attackers to execute arbitrary PHP code without authentication. This could lead to potential exploitation, impacting confidentiality, integrity, and availability. Defenders should assess exposure and prioritize patching or mitigation. The CVE record and NVD entry p [truncated]
CVE-2026-62125 is a critical unauthenticated PHP Object Injection vulnerability in the Asia Garden theme version <= 1.3.1. Defenders should assess exposure, prioritize remediation, and verify vendor-provided fixes.
The N7 | Golf Club Sports & Events theme for WordPress, version 2.21 or earlier, contains an Unauthenticated PHP Object Injection vulnerability. This vulnerability allows attackers to inject malicious PHP objects without authentication, potentially leading to code execution. Defenders should assess exposure and impact due to the critical severity of this vulnerability. The CVE record and NVD entry provide [truncated]
The Invetex theme versions <= 2.18 is vulnerable to unauthenticated PHP Object Injection. This critical vulnerability may allow attackers to execute arbitrary code, potentially leading to data tampering or unauthorized access. Defenders should verify exposure and assess potential impact. The CVE record and NVD entry provide limited information about the vulnerability, so verification from official sources [truncated]
The Law Office theme for WordPress, version 3.20 and prior, is vulnerable to unauthenticated PHP object injection. This critical vulnerability, with a CVSS score of 9.8, could allow attackers to execute arbitrary PHP code without needing authentication. Defenders should prioritize verification of installed versions and restrict access to vulnerable installations to prevent potential attacks. The CVE recor [truncated]
The WineShop theme for WordPress, version 3.20 or earlier, contains an unauthenticated PHP Object Injection vulnerability. This vulnerability is classified as Critical with a CVSS score of 9.8. The vulnerability could lead to potential unauthenticated code execution, impacting data confidentiality and integrity. Defenders should verify exposure, prioritize patching or mitigation, and monitor for exploitat [truncated]
A critical vulnerability was found in the Equadio theme for WordPress, affecting versions up to 1.1.4. This vulnerability allows unauthenticated PHP object injection, which could potentially lead to severe consequences.
Unauthenticated PHP Object Injection vulnerability in Juno theme versions up to 2.25. The vulnerability has a CVSS score of 9.8, indicating critical severity. Administrators and security teams should assess exposure and apply patches or updates if available. Limited vendor and product information is confirmed, and there is limited information available on potential exploitation. Immediate assessment and p [truncated]
The Ozeum theme versions <= 1.3.0 is vulnerable to Unauthenticated Local File Inclusion. This high-severity vulnerability allows attackers to include arbitrary files, potentially leading to unauthorized file access or data breaches. Defenders and administrators of Ozeum theme deployments should assess exposure and prioritize remediation to prevent potential security incidents.
CVE-2026-62054 is a critical unauthenticated PHP Object Injection vulnerability in Yacht Rental theme versions <= 2.6. Defenders should assess exposure, prioritize remediation, and verify inventory for potential impact.
The Wine House theme versions 3.20 or earlier has an unauthenticated PHP Object Injection vulnerability. This critical vulnerability, with a CVSS score of 9.8, could allow attackers to execute arbitrary code on affected systems. Defenders should verify exposure and apply patches or mitigations to prevent potential code execution and data breaches. The vulnerability was reported by Patchstack. Due to limit [truncated]
A critical vulnerability was found in the Tipsy WordPress theme, version 1.6 or earlier. This vulnerability allows unauthenticated PHP object injection, which can lead to severe consequences.
The Unauthenticated PHP Object Injection vulnerability in Stargaze theme versions <= 1.10 allows for potential code execution and data tampering. Defenders should verify exposure and assess potential impact. The CVE record and NVD entry provide limited information about the vulnerability, so verification and review of official advisories are necessary.
A critical vulnerability was found in the Splendour theme, affecting versions up to 1.23. This vulnerability allows unauthenticated PHP object injection, which could lead to severe consequences if exploited.
Unauthenticated PHP Object Injection vulnerability in ThemeREX Addons versions less than 2.45.0 allows for potential code execution. Defenders should verify exposure and apply patches due to the critical severity rating of 9.8. The CVE record and NVD entry provide limited information, and further review is necessary to understand the full impact. Confirm affected product deployments exist in managed envir [truncated]
CVE-2026-65573 is a critical unauthenticated PHP object injection vulnerability in Abelle theme version 1.22 or earlier. The vulnerability has a CVSS score of 9.8 and is considered critical. Affected users should review official advisories, verify affected scope, and apply vendor patches or updates. The CVE record was published on 2026-08-06T15:17:18.813Z and has not been modified since then. Defenders sh [truncated]
CVE-2025-69175 is a HIGH severity vulnerability (CVSS Score: 8.1) in the Line Agency theme, version <= 1.3.1. This vulnerability allows unauthenticated local file inclusion. The CVE was published on 2026-06-17T14:17:35.790Z and last modified on 2026-06-17T15:16:39.937Z. Users of the affected theme should take immediate action to mitigate potential risks.
CVE-2025-69174 is a HIGH severity vulnerability with a CVSS score of 8.1, affecting Etude theme versions <= 1.6. It allows unauthenticated local file inclusion, potentially leading to file inclusion attacks. Users of Etude theme version <= 1.6 should prioritize patching this vulnerability to prevent potential security breaches. The vulnerability has been identified in the Etude theme, and its exploitation [truncated]
CVE-2025-69166 is a HIGH severity vulnerability with a CVSS score of 8.1, affecting Gunslinger theme versions up to and including 1.7. It allows unauthenticated local file inclusion. The vulnerability has a CVSS vector of CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H. Users of Gunslinger theme version 1.7 or earlier should be aware of this vulnerability and take necessary actions to protect their installat [truncated]
CVE-2025-69164 is a HIGH severity vulnerability (CVSS Score: 8.1) affecting Skyward theme versions <= 1.10. This vulnerability allows unauthenticated local file inclusion. The CVE was published on 2026-06-17T14:17:34.923Z and last modified on 2026-06-17T15:16:39.180Z. Organizations using affected Skyward theme versions should take immediate action to mitigate potential risks.
CVE-2025-69158 is a HIGH severity vulnerability (CVSS Score: 8.1) in the Granola theme, affecting versions up to 1.13. This vulnerability allows unauthenticated local file inclusion, potentially enabling attackers to access sensitive files. The vulnerability was published on June 17, 2026, and last modified on the same day. Organizations using the affected Granola theme versions should take immediate acti [truncated]
CVE-2025-69157 is an Unauthenticated Local File Inclusion vulnerability affecting Gamic theme versions <= 1.15. The CVSS score is 8.1, indicating high severity. According to the CVE record, the vulnerability was published on 2026-06-17T14:17:34.617Z and last modified on 2026-06-17T15:16:38.860Z. This type of vulnerability allows attackers to include files on a server through a web browser, potentially lea [truncated]
CVE-2025-69144 is a HIGH severity vulnerability (CVSS Score: 8.1) in the Preservation theme for WordPress versions <= 1.10. This vulnerability allows unauthenticated local file inclusion, potentially enabling attackers to access sensitive files and data. The vulnerability was published on June 17, 2026, and last modified on the same day. Organizations using the Preservation theme should take immediate act [truncated]
CVE-2025-69127 is a critical unauthenticated PHP object injection vulnerability in the Plumbing theme, affecting versions <= 1.6. With a CVSS score of 9.8, this vulnerability allows attackers to execute arbitrary code on the server. Evidence from official CVE services indicates ThemeREX as the affected vendor. Limited information is available on the scope of affected systems and potential exploit vectors.
