Vulnerabilities
How Does CVE-2026-62052 Allow Unauthenticated Object Injection in Tipsy Theme?
A critical PHP object injection flaw in the Tipsy WordPress theme allows attackers to execute code without logging in, affecting versions up to 1.6.
ThemeREX
Everything CloudSec Press has reported about ThemeREX: 2 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
Vulnerabilities
Could a CVSS 9.8 Flaw in ThemeREX Dwell 1.16.0 Let Attackers Inject Objects?
A critical deserialization flaw in ThemeREX Dwell versions through 1.16.0 allows attackers to inject objects via untrusted data.