CVE-2026-112858: WordPress Rhodos theme <= 1.3.3 - PHP Object Injection vulnerability

Q: Which Rhodos installations are affected?

Rhodos versions through 1.3.3 are affected. The available data does not identify a safe fixed version.

Q: Does exploiting this issue require authentication or user interaction?

No. The CVSS vector indicates network-based exploitation with low attack complexity, no privileges required, and no user interaction required.

Q: What is the potential impact if exploited?

The issue is rated critical with a CVSS score of 9.8 and can affect confidentiality, integrity, and availability at high impact levels.

Published Oct 23, 2026

Updated

Deserialization of Untrusted Data vulnerability in axiomthemes Rhodos rhodos allows Object Injection.This issue affects Rhodos: from n/a through 1.3.3.

Affected Software

1 affected component

axiomthemes Rhodos<=1.3.3

Event History

Oct 23, 2026

CVE Published

via MITRE·01:00 PM

Data Sourced

via MITRE·01:00 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Which Rhodos installations are affected?

Rhodos versions through 1.3.3 are affected. The available data does not identify a safe fixed version.

Does exploiting this issue require authentication or user interaction?

No. The CVSS vector indicates network-based exploitation with low attack complexity, no privileges required, and no user interaction required.

What is the potential impact if exploited?

The issue is rated critical with a CVSS score of 9.8 and can affect confidentiality, integrity, and availability at high impact levels.

CVE-2026-112858: WordPress Rhodos theme <= 1.3.3 - PHP Object Injection vulnerability

Affected Software

Event History

Frequently Asked Questions

Which Rhodos installations are affected?

Does exploiting this issue require authentication or user interaction?

What is the potential impact if exploited?

Company

Resources

Contact

Frequently Asked Questions

Which Rhodos installations are affected?

Does exploiting this issue require authentication or user interaction?

What is the potential impact if exploited?