CVE-2026-112846EUVD-2026-108951GHSA-3CWM-HCQF-G7J5
WordPress Save Life theme <= 1.2.14 - PHP Object Injection vulnerability
- Published
- Last modified
- Status
- published
- Known exploitation
- Not listed in CISA KEV
- Public exploit
- None on Exploit-DB
Summary
The Save Life theme for WordPress, developed by ThemeREX Group, is affected by this vulnerability. An attacker could exploit it to inject malicious serialized objects, which may allow them to compromise the affected website.
Summarized by anthropic/claude-haiku-5.5. Verify details against the original sources.
Read the original description
Deserialization of Untrusted Data vulnerability in ThemeREX Group Save Life save-life allows Object Injection.This issue affects Save Life: from n/a through 1.2.14.
Affected versions
- save-life
through 1.2.14