CVE-2026-112847EUVD-2026-108952GHSA-XP4Q-VM3G-G3H3
WordPress ZenSoul theme <= 1.13 - PHP Object Injection vulnerability
- Published
- Last modified
- Status
- published
- Known exploitation
- Not listed in CISA KEV
- Public exploit
- None on Exploit-DB
Summary
The ZenSoul WordPress theme, developed by ThemeREX, is affected by this vulnerability. An attacker could exploit the flaw to inject malicious PHP objects by supplying untrusted serialized data, which could potentially lead to code execution or other unauthorized actions on the affected website.
Summarized by anthropic/claude-haiku-5.5. Verify details against the original sources.
Read the original description
Deserialization of Untrusted Data vulnerability in ThemeREX ZenSoul zensoul allows Object Injection.This issue affects ZenSoul: from n/a through 1.13.
Affected versions
- zensoul
through 1.13