CVE-2026-62017: WordPress Good Homes theme <= 1.3.13 - PHP Object Injection vulnerability
Published Oct 29, 2026
·Updated
Unauthenticated PHP Object Injection in Good Homes <= 1.3.13 versions.
Event History
Oct 29, 2026
CVE Published
via MITRE·03:24 PM
Data Sourced
via MITRE·03:24 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·04:18 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Who can exploit this issue?
The vulnerability is unauthenticated, so an attacker does not need a WordPress account or prior access to target an affected site.
2
Which installations are affected?
Good Homes theme versions 1.3.13 and earlier are affected. The provided information does not state whether any particular WordPress configuration or feature must be enabled.
3
What is the potential impact?
The issue is rated critical with high impacts to confidentiality, integrity, and availability. Successful exploitation could therefore expose data, alter site content or configuration, and disrupt service.