CVE-2026-54857EUVD-2026-112949
WordPress Quirky theme <= 1.23 - PHP Object Injection vulnerability
- Published
- Last modified
- Status
- published
- Known exploitation
- Not listed in CISA KEV
- Public exploit
- None on Exploit-DB, Metasploit or GitHub
Summary
Unauthenticated PHP Object Injection in Quirky <= 1.23 versions.
Timeline
- CVE published
- Record last updated
- First seen by cve.now
- Posted on X by cve.now
Affected versions
- ThemeREX Quirky
through 1.23