TI-2026-20518 CVE-2026-25400 · GHSA-2fj3-qvr8-q2c6WordPress Apicona theme <= 24.1.0 - PHP Object Injection vulnerabilityPriority MEDIUM 40Deserialization of Untrusted Data vulnerability in thememount Apicona apicona allows Object Injection.This issue affects Apicona: from n/a through <= 24.1.0.CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00357 · Published 2026-03-25 · No fix listed CWE-502