CVE-2026-112855EUVD-2026-108943GHSA-RP4F-997R-JC7C
WordPress Redy theme <= 1.3.5 - PHP Object Injection vulnerability
- Published
- Last modified
- Status
- published
- Known exploitation
- Not listed in CISA KEV
- Public exploit
- None on Exploit-DB
Summary
The Redy theme for WordPress, developed by axiomthemes, is affected by this vulnerability. An attacker could exploit the flaw to inject malicious serialized objects, potentially leading to code execution, data theft, or site compromise.
Summarized by anthropic/claude-haiku-5.5. Verify details against the original sources.
Read the original description
Deserialization of Untrusted Data vulnerability in axiomthemes Redy redy allows Object Injection.This issue affects Redy: from n/a through 1.3.5.
Affected versions
- redy
through 1.3.5