CVE-2026-112851
CVE-2026-112851 · WordPress HotLock theme <= 1.3.9 - PHP Object Injection vulnerability
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Deserialization of Untrusted Data vulnerability in ThemeREX Group HotLock hotlock allows Object Injection.This issue affects HotLock: from n/a through 1.3.9.
CVSS 9.8 · Critical · EPSS 0.3%
- Published
- Updated
Affected products and versions
hotlock
- Versions
- ≥ 0, ≤ 1.3.9: Affected (custom)
No fix published