Read the docs

sbthemes

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

sbthemes records in CISA KEV

No sbthemes vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2026-21508 CVE-2026-27045 · GHSA-5mg7-jhw3-8jvg

WordPress WooCommerce Infinite Scroll plugin <= 1.6.2 - PHP Object Injection vulnerability

Priority MEDIUM 40

Deserialization of Untrusted Data vulnerability in sbthemes WooCommerce Infinite Scroll sb-woocommerce-infinite-scroll allows Object Injection.This issue affects WooCommerce Infinite Scroll: from n/a through <= 1.6.2.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00357 Published 2026-03-25 No fix listed CWE-502
TI-2025-10995 CVE-2025-11993 · GHSA-88pw-x8mv-5vj5

WooCommerce Infinite Scroll and Ajax Pagination <= 1.8 - Authenticated (Subscriber+) PHP Object Injection

Priority MEDIUM 40

The WooCommerce Infinite Scroll and Ajax Pagination plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.8 via the 'settings' parameter in the 'import_settings' function.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00378 Published 2026-05-29 No fix listed CWE-502
Open these records in search →