CVE-2026-54860: WordPress Ozisti theme <= 1.1.10 - PHP Object Injection vulnerability

Q: Who can exploit this issue?

The issue is unauthenticated, so an attacker does not need a WordPress account or prior privileges. The vector is network-accessible and requires neither user interaction nor complex attack conditions.

Q: Which installations are affected?

Ozisti theme versions 1.1.10 and earlier are affected according to the available information. The data does not identify any configuration prerequisite or safe default configuration.

Q: What is the potential impact?

Successful exploitation can affect confidentiality, integrity, and availability at a high level. The vulnerability is rated critical with a CVSS score of 9.8.

Published Oct 29, 2026

Updated

Unauthenticated PHP Object Injection in Ozisti <= 1.1.10 versions.

Event History

Oct 29, 2026

CVE Published

via MITRE·03:24 PM

Data Sourced

via MITRE·03:24 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·04:18 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Who can exploit this issue?

The issue is unauthenticated, so an attacker does not need a WordPress account or prior privileges. The vector is network-accessible and requires neither user interaction nor complex attack conditions.

Which installations are affected?

Ozisti theme versions 1.1.10 and earlier are affected according to the available information. The data does not identify any configuration prerequisite or safe default configuration.

What is the potential impact?

Successful exploitation can affect confidentiality, integrity, and availability at a high level. The vulnerability is rated critical with a CVSS score of 9.8.

CVE-2026-54860: WordPress Ozisti theme <= 1.1.10 - PHP Object Injection vulnerability

Event History

Frequently Asked Questions

Who can exploit this issue?

Which installations are affected?

What is the potential impact?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

Which installations are affected?

What is the potential impact?