CVE-2026-112858EUVD-2026-108945GHSA-C7G4-27CM-3CJ8
WordPress Rhodos theme <= 1.3.3 - PHP Object Injection vulnerability
- Published
- Last modified
- Status
- published
- Known exploitation
- Not listed in CISA KEV
- Public exploit
- None on Exploit-DB
Summary
The Rhodos theme for WordPress is affected. An attacker could exploit this flaw to inject PHP objects, which could potentially lead to arbitrary code execution or other serious compromise of the website.
Summarized by anthropic/claude-haiku-5.5. Verify details against the original sources.
Read the original description
Deserialization of Untrusted Data vulnerability in axiomthemes Rhodos rhodos allows Object Injection.This issue affects Rhodos: from n/a through 1.3.3.
Affected versions
- rhodos
through 1.3.3