CVE-2026-112856
CVE-2026-112856 · WordPress Vagabonds theme <= 1.3.10 - PHP Object Injection vulnerability
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Deserialization of Untrusted Data vulnerability in ThemeREX Group Vagabonds vagabonds allows Object Injection.This issue affects Vagabonds: from n/a through 1.3.10.
CVSS 9.8 · Critical · EPSS 0.3%
- Published
- Updated
Affected products and versions
vagabonds
- Versions
- ≥ 0, ≤ 1.3.10: Affected (custom)
No fix published