Read the docs

rascals

Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high5CVSS 7.0–8.9

Exploited now

rascals records in CISA KEV

No rascals vulnerabilities are listed in CISA KEV.

Records

6 records

TI-2025-37405 CVE-2025-60039 · GHSA-jqw6-g9q9-cwhq

WordPress Noisa theme <= 2.6.0 - PHP Object Injection vulnerability

Priority MEDIUM 49

Deserialization of Untrusted Data vulnerability in rascals Noisa noisa allows Object Injection.This issue affects Noisa: from n/a through <= 2.6.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00489 Published 2025-10-22 No fix listed CWE-502
TI-2026-70369 CVE-2026-62021 · GHSA-7pq8-46v4-4wp9

PHP Object Injection in WordPress Angio theme

Priority MEDIUM 40

Subscriber PHP Object Injection in Angio <= 1.1.1 versions.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00468 Published 2026-10-10 No fix listed CWE-502
TI-2026-20478 CVE-2026-25360 · GHSA-j478-j379-4pfx

WordPress Vex theme < 1.2.9 - PHP Object Injection vulnerability

Priority MEDIUM 40

Deserialization of Untrusted Data vulnerability in rascals Vex vex allows Object Injection.This issue affects Vex: from n/a through < 1.2.9.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00357 Published 2026-03-25 No fix listed CWE-502
TI-2026-20477 CVE-2026-25359 · GHSA-w7gm-q7h5-8h8w

WordPress Pendulum theme < 3.1.5 - PHP Object Injection vulnerability

Priority MEDIUM 40

Deserialization of Untrusted Data vulnerability in rascals Pendulum pendulum allows Object Injection.This issue affects Pendulum: from n/a through < 3.1.5.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00357 Published 2026-03-25 No fix listed CWE-502
TI-2026-20476 CVE-2026-25358 · GHSA-9j7f-jrv9-w3rr

WordPress Meloo theme < 2.8.2 - PHP Object Injection vulnerability

Priority MEDIUM 40

Deserialization of Untrusted Data vulnerability in rascals Meloo meloo allows Object Injection.This issue affects Meloo: from n/a through < 2.8.2.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00357 Published 2026-03-25 No fix listed CWE-502
TI-2025-33497 CVE-2025-53560 · GHSA-xvrc-cwrh-jw5g

WordPress Noisa theme <= 2.6.0 - PHP Object Injection Vulnerability

Priority MEDIUM 40

Deserialization of Untrusted Data vulnerability in rascals Noisa noisa allows Object Injection.This issue affects Noisa: from n/a through <= 2.6.0.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00383 Published 2025-08-20 No fix listed CWE-502
Open these records in search →