Vulnerabilities
ThemeREX Partiso WordPress Theme Vulnerable to Critical Deserialization Attack
A CVSS 9.8 flaw in the Partiso theme allows object injection through untrusted data deserialization in versions prior to 1.1.13.
WordPress
Everything DataSafe Radar has reported about WordPress: 4 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
Vulnerabilities
WPCOM Member CVSS 9.8 Flaw Enables Unauthenticated Account Takeover via Social Login Validation Gap
Unauthenticated attackers can take over any WordPress account, including administrators, by exploiting missing validation in the WPCOM Member plugin’s social login flow.
Vulnerabilities
Booklovers Theme Deserialization Flaw CVE-2026-62045 Rated Critical for Versions Up to 2.13.0
The NVD rates CVE-2026-62045 as critical because untrusted data deserialization allows object injection in the Booklovers theme.
Vulnerabilities
Hogwords Object Injection: Critical CVE-2026-93938 Threatens WordPress Sites on Version 1.2.7 or Earlier
A critical vulnerability in the Hogwords plugin allows object injection, posing severe risks to WordPress sites running version 1.2.7 or earlier.