CVE-2026-112846: WordPress Save Life theme <= 1.2.14 - PHP Object Injection vulnerability
Published Oct 23, 2026
·Updated
Deserialization of Untrusted Data vulnerability in ThemeREX Group Save Life save-life allows Object Injection.This issue affects Save Life: from n/a through 1.2.14.
Affected Software
1 affected component
ThemeREX Group Save Life<=1.2.14
Event History
Oct 23, 2026
CVE Published
via MITRE·01:00 PM
Data Sourced
via MITRE·01:00 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Which versions are affected?
Save Life versions through 1.2.14 are affected. The available data does not identify a first affected version.
2
Can this be exploited remotely without an account or user interaction?
Yes. The CVSS vector indicates network attack access, low attack complexity, no privileges required, and no user interaction required.
3
What is the potential impact of successful exploitation?
The CVSS vector indicates high impact to confidentiality, integrity, and availability. The vulnerability is rated critical with a 9.8 CVSS score.