CVE-2026-112859EUVD-2026-108944GHSA-8XHM-XWWM-CMM8
WordPress Little Birdies theme <= 1.3.16 - PHP Object Injection vulnerability
- Published
- Last modified
- Status
- published
- Known exploitation
- Not listed in CISA KEV
- Public exploit
- None on Exploit-DB
Summary
The Little Birdies theme for WordPress, developed by ThemeREX Group, is affected. An attacker could exploit this PHP object injection flaw, which stems from unsafe handling of untrusted serialized data, to potentially run malicious code or manipulate the site's data.
Summarized by anthropic/claude-haiku-5.5. Verify details against the original sources.
Read the original description
Deserialization of Untrusted Data vulnerability in ThemeREX Group Little Birdies little-birdies allows Object Injection.This issue affects Little Birdies: from n/a through 1.3.16.
Affected versions
- little-birdies
through 1.3.16