CVE-2026-62016: WordPress Gamic theme <= 1.19 - PHP Object Injection vulnerability

Q: Who can exploit this issue?

The issue is unauthenticated, so an attacker does not need a WordPress account or prior privileges. The network attack vector and low attack complexity indicate it can be targeted remotely with minimal prerequisites.

Q: Which installations are affected?

Gamic theme versions 1.19 and earlier are affected. The provided information does not identify a configuration-dependent condition, so affected versions should be treated as exposed unless further vendor guidance says otherwise.

Q: What is the potential impact?

Successful exploitation can affect confidentiality, integrity, and availability at a high level. This means an attacker may be able to access sensitive information, alter data, or disrupt the affected site.

Published Oct 29, 2026

Updated

Unauthenticated PHP Object Injection in Gamic <= 1.19 versions.

Event History

Oct 29, 2026

CVE Published

via MITRE·03:24 PM

Data Sourced

via MITRE·03:24 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·04:18 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Who can exploit this issue?

The issue is unauthenticated, so an attacker does not need a WordPress account or prior privileges. The network attack vector and low attack complexity indicate it can be targeted remotely with minimal prerequisites.

Which installations are affected?

Gamic theme versions 1.19 and earlier are affected. The provided information does not identify a configuration-dependent condition, so affected versions should be treated as exposed unless further vendor guidance says otherwise.

What is the potential impact?