CVE-2026-62015: WordPress Gamezone theme <= 1.1.11 - PHP Object Injection vulnerability

Q: Who can exploit this issue?

The issue is unauthenticated, so an attacker does not need a WordPress account or prior privileges to attempt exploitation. The supplied vector indicates it can be reached over the network with low attack complexity and no user interaction.

Q: What is the potential impact if exploitation succeeds?

The provided severity vector rates confidentiality, integrity, and availability impact as high. This means successful exploitation may expose data, alter data, or disrupt service.

Q: Which Gamezone versions are affected?

Gamezone versions up to and including 1.1.11 are identified as affected.

Published Oct 29, 2026

Updated

Unauthenticated PHP Object Injection in Gamezone <= 1.1.11 versions.

Event History

Oct 29, 2026

CVE Published

via MITRE·03:24 PM

Data Sourced

via MITRE·03:24 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·04:18 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Who can exploit this issue?

The issue is unauthenticated, so an attacker does not need a WordPress account or prior privileges to attempt exploitation. The supplied vector indicates it can be reached over the network with low attack complexity and no user interaction.

What is the potential impact if exploitation succeeds?

The provided severity vector rates confidentiality, integrity, and availability impact as high. This means successful exploitation may expose data, alter data, or disrupt service.

Which Gamezone versions are affected?