CVE-2026-57744: WordPress RT-Theme 18 | Extensions plugin <= 2.5 - PHP Object Injection vulnerability
Published Jul 13, 2026
·Updated
Deserialization of Untrusted Data vulnerability in stmcan RT-Theme 18 | Extensions rt18-extensions allows Object Injection.This issue affects RT-Theme 18 | Extensions: from n/a through <= 2.5.
Affected Software
1 affected component
WordPress RT-Theme 18 | Extensions<=2.5
Event History
Jul 13, 2026
CVE Published
via MITRE·08:41 AM
Data Sourced
via MITRE·08:41 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·10:16 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2026-57744?
The severity of CVE-2026-57744 is critical with a score of 9.8.
2
What is CVE-2026-57744 about?
CVE-2026-57744 describes a PHP Object Injection vulnerability in the RT-Theme 18 | Extensions plugin for WordPress.
3
How do I fix CVE-2026-57744?
To fix CVE-2026-57744, update the RT-Theme 18 | Extensions plugin to version 2.6 or later.
4
What impact does CVE-2026-57744 have on WordPress sites?
CVE-2026-57744 allows unauthenticated attackers to exploit object injection vulnerabilities, potentially leading to data compromise.
5
Which versions of RT-Theme 18 | Extensions are affected by CVE-2026-57744?
CVE-2026-57744 affects RT-Theme 18 | Extensions versions from n/a up to and including 2.5.