TI-2026-28422 CVE-2026-39445 · GHSA-xv4h-3jg8-vf5r
WordPress Alukas theme < 3.0.0 - PHP Object Injection vulnerability
Priority LOW 37
Unauthenticated PHP Object Injection in Alukas < 3.0.0 versions.
6 records
Unauthenticated PHP Object Injection in Alukas < 3.0.0 versions.
Unauthenticated PHP Object Injection in PressMart <= 1.2.26 versions.
Unauthenticated Cross Site Scripting (XSS) in Kapee < 1.7.1 versions.
Unauthenticated PHP Object Injection in Kapee < 1.7.0 versions.
Unauthenticated PHP Object Injection in EmallShop <= 2.4.21 versions.
The PressMart - Modern Elementor WooCommerce WordPress Theme theme for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 1.2.16.