CVE-2026-62006: WordPress Nuts theme <= 1.12 - PHP Object Injection vulnerability

Q: Who can exploit this issue?

The vulnerability is unauthenticated, so an attacker does not need a WordPress account or prior access to target an affected site.

Q: Which installations are affected?

Nuts theme versions 1.12 and earlier are identified as affected. The provided information does not state whether any particular configuration or feature must be enabled.

Q: What security impact could exploitation have?

The assigned critical severity vector indicates network-reachable exploitation with low attack complexity and no privileges or user interaction required, with high potential impact to confidentiality, integrity, and availability.

Published Oct 29, 2026

Updated

Unauthenticated PHP Object Injection in Nuts <= 1.12 versions.

Event History

Oct 29, 2026

CVE Published

via MITRE·03:24 PM

Data Sourced

via MITRE·03:24 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·04:18 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Who can exploit this issue?

The vulnerability is unauthenticated, so an attacker does not need a WordPress account or prior access to target an affected site.

Which installations are affected?

Nuts theme versions 1.12 and earlier are identified as affected. The provided information does not state whether any particular configuration or feature must be enabled.

What security impact could exploitation have?

The assigned critical severity vector indicates network-reachable exploitation with low attack complexity and no privileges or user interaction required, with high potential impact to confidentiality, integrity, and availability.

CVE-2026-62006: WordPress Nuts theme <= 1.12 - PHP Object Injection vulnerability

Event History

Frequently Asked Questions

Who can exploit this issue?

Which installations are affected?

What security impact could exploitation have?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

Which installations are affected?

What security impact could exploitation have?