Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

Vendor: rascals Clear all filters
TI-2026-70369 CVE-2026-62021 · GHSA-7pq8-46v4-4wp9

PHP Object Injection in WordPress Angio theme

Priority MEDIUM 40

Subscriber PHP Object Injection in Angio <= 1.1.1 versions.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00468 Published 2026-10-10 No fix listed CWE-502
TI-2026-20478 CVE-2026-25360 · GHSA-j478-j379-4pfx

WordPress Vex theme < 1.2.9 - PHP Object Injection vulnerability

Priority MEDIUM 40

Deserialization of Untrusted Data vulnerability in rascals Vex vex allows Object Injection.This issue affects Vex: from n/a through < 1.2.9.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00357 Published 2026-03-25 No fix listed CWE-502
TI-2026-20477 CVE-2026-25359 · GHSA-w7gm-q7h5-8h8w

WordPress Pendulum theme < 3.1.5 - PHP Object Injection vulnerability

Priority MEDIUM 40

Deserialization of Untrusted Data vulnerability in rascals Pendulum pendulum allows Object Injection.This issue affects Pendulum: from n/a through < 3.1.5.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00357 Published 2026-03-25 No fix listed CWE-502
TI-2026-20476 CVE-2026-25358 · GHSA-9j7f-jrv9-w3rr

WordPress Meloo theme < 2.8.2 - PHP Object Injection vulnerability

Priority MEDIUM 40

Deserialization of Untrusted Data vulnerability in rascals Meloo meloo allows Object Injection.This issue affects Meloo: from n/a through < 2.8.2.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00357 Published 2026-03-25 No fix listed CWE-502
TI-2025-37405 CVE-2025-60039 · GHSA-jqw6-g9q9-cwhq

WordPress Noisa theme <= 2.6.0 - PHP Object Injection vulnerability

Priority MEDIUM 49

Deserialization of Untrusted Data vulnerability in rascals Noisa noisa allows Object Injection.This issue affects Noisa: from n/a through <= 2.6.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00489 Published 2025-10-22 No fix listed CWE-502
TI-2025-33497 CVE-2025-53560 · GHSA-xvrc-cwrh-jw5g

WordPress Noisa theme <= 2.6.0 - PHP Object Injection Vulnerability

Priority MEDIUM 40

Deserialization of Untrusted Data vulnerability in rascals Noisa noisa allows Object Injection.This issue affects Noisa: from n/a through <= 2.6.0.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00383 Published 2025-08-20 No fix listed CWE-502