Threat Entry Updated 2026-03-19

CVE-2026-27096 - Allows Object Injection Theme

Deserialization of Untrusted Data vulnerability in BuddhaThemes ColorFolio - Freelance Designer WordPress Theme allows Object Injection.This issue affects ColorFolio - Freelance Designer WordPress Theme: from n/a through 1.3.

THEME Allows Object Injection

CVE-2026-27096

HIGH CVSS 8.1 2026-03-19

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2025-07-16

CVE-2025-31422 - Allows Object Injection Theme

Deserialization of Untrusted Data vulnerability in designthemes Visual Art | Gallery WordPress Theme allows Object Injection. This issue affects Visual Art | Gallery WordPress Theme: from n/a through 2.4.

THEME Allows Object Injection

CVE-2025-31422

HIGH CVSS 8.8 2025-07-16

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2025-06-12

CVE-2025-31396 - Allows Object Injection Theme

Deserialization of Untrusted Data vulnerability in themeton FLAP - Business WordPress Theme allows Object Injection. This issue affects FLAP - Business WordPress Theme: from n/a through 1.5.

THEME Allows Object Injection

CVE-2025-31396

CRITICAL CVSS 9.8 2025-06-09

Risk Score

Open Full Technical Breakdown