CVE-2026-62010: WordPress Avventure theme <= 1.1.12 - PHP Object Injection vulnerability

Q: What level of access does an attacker need?

No authentication, privileges, or user interaction are required. The CVSS vector indicates the issue can be exploited remotely over the network with low attack complexity.

Q: What is the potential impact of successful exploitation?

Successful exploitation can have high impact on confidentiality, integrity, and availability. The vulnerability is rated critical with a CVSS score of 9.8.

Q: Which installations should be treated as affected?

Avventure theme installations running version 1.1.12 or earlier should be treated as affected based on the available information.

Published Oct 29, 2026

Updated

Unauthenticated PHP Object Injection in Avventure <= 1.1.12 versions.

Event History

Oct 29, 2026

CVE Published

via MITRE·03:24 PM

Data Sourced

via MITRE·03:24 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·04:18 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What level of access does an attacker need?

No authentication, privileges, or user interaction are required. The CVSS vector indicates the issue can be exploited remotely over the network with low attack complexity.

What is the potential impact of successful exploitation?

Successful exploitation can have high impact on confidentiality, integrity, and availability. The vulnerability is rated critical with a CVSS score of 9.8.

Which installations should be treated as affected?