CVE-2026-112855: WordPress Redy theme <= 1.3.5 - PHP Object Injection vulnerability

Q: Which deployments are affected?

Deployments using the axiomthemes Redy theme are affected through version 1.3.5. The available information does not identify an unaffected fixed version.

Q: Does exploitation require an authenticated WordPress account or user interaction?

No. The vulnerability is rated as network-accessible, low complexity, requiring no privileges and no user interaction.

Q: What could successful exploitation affect?

The reported severity vector indicates potential high impact to confidentiality, integrity, and availability.

Published Oct 23, 2026

Updated

Deserialization of Untrusted Data vulnerability in axiomthemes Redy redy allows Object Injection.This issue affects Redy: from n/a through 1.3.5.

Affected Software

1 affected component

axiomthemes Redy<=1.3.5

Event History

Oct 23, 2026

CVE Published

via MITRE·01:00 PM

Data Sourced

via MITRE·01:00 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Which deployments are affected?

Deployments using the axiomthemes Redy theme are affected through version 1.3.5. The available information does not identify an unaffected fixed version.

Does exploitation require an authenticated WordPress account or user interaction?

No. The vulnerability is rated as network-accessible, low complexity, requiring no privileges and no user interaction.

What could successful exploitation affect?

The reported severity vector indicates potential high impact to confidentiality, integrity, and availability.

CVE-2026-112855: WordPress Redy theme <= 1.3.5 - PHP Object Injection vulnerability

Affected Software

Event History

Frequently Asked Questions

Which deployments are affected?

Does exploitation require an authenticated WordPress account or user interaction?

What could successful exploitation affect?

Company

Resources

Contact

Frequently Asked Questions

Which deployments are affected?

Does exploitation require an authenticated WordPress account or user interaction?

What could successful exploitation affect?