CVE-2026-112854EUVD-2026-108953GHSA-M93C-PH3F-WMG5
WordPress Holistic Center theme <= 1.2.6 - PHP Object Injection vulnerability
- Published
- Last modified
- Status
- published
- Known exploitation
- Not listed in CISA KEV
- Public exploit
- None on Exploit-DB
Summary
The Holistic Center theme for WordPress, developed by axiomthemes, is affected by this vulnerability. An attacker could exploit the flaw to inject malicious PHP objects, which could potentially lead to code execution or other harmful effects on the affected website.
Summarized by anthropic/claude-haiku-5.5. Verify details against the original sources.
Read the original description
Deserialization of Untrusted Data vulnerability in axiomthemes Holistic Center holistic-center allows Object Injection.This issue affects Holistic Center: from n/a through 1.2.6.
Affected versions
- holistic-center
through 1.2.6