CVE-2026-22474: WordPress Equestrian Centre theme <= 1.5 - PHP Object Injection vulnerability
Published Mar 5, 2026
·Updated
Deserialization of Untrusted Data vulnerability in ThemeREX Equestrian Centre equestrian-centre allows Object Injection.This issue affects Equestrian Centre: from n/a through <= 1.5.
Affected Software
1 affected component
ThemeREX Equestrian Centre<=1.5
Event History
Mar 5, 2026
CVE Published
via MITRE·05:53 AM
Data Sourced
via MITRE·05:53 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·06:16 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What level of access does an attacker need to exploit this issue?
The CVSS vector indicates exploitation can be performed remotely over the network with no privileges or user interaction required. It is rated low complexity.
2
Which installations are affected?
ThemeREX Equestrian Centre versions through 1.5 are affected. The affected version range begins at an unspecified earlier version.
3
What is the potential impact of successful exploitation?
The CVSS assessment assigns high impacts to confidentiality, integrity, and availability. Successful exploitation could therefore expose data, alter data, and disrupt service.