CVE-2026-62021: WordPress Angio theme <= 1.1.1 - PHP Object Injection vulnerability

Q: Who can exploit this issue?

An attacker needs Subscriber-level access to a WordPress site using an affected Angio theme version. The attack is network-accessible and does not require user interaction.

Q: What level of impact could successful exploitation have?

The listed CVSS vector indicates high impact to confidentiality, integrity, and availability. Exploitation could therefore expose data, alter site or server-side content, or disrupt availability.

Q: Are sites using the theme by default exposed?

The available information identifies Angio versions through 1.1.1 as affected, but it does not state whether a particular default WordPress or theme configuration is required.

Published Oct 10, 2026

Updated

Subscriber PHP Object Injection in Angio <= 1.1.1 versions.

Affected Software

1 affected component

WordPress Angio theme<=1.1.1

Event History

Oct 10, 2026

CVE Published

via MITRE·07:35 PM

Data Sourced

via MITRE·07:35 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·08:16 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Who can exploit this issue?

An attacker needs Subscriber-level access to a WordPress site using an affected Angio theme version. The attack is network-accessible and does not require user interaction.

What level of impact could successful exploitation have?

The listed CVSS vector indicates high impact to confidentiality, integrity, and availability. Exploitation could therefore expose data, alter site or server-side content, or disrupt availability.

Are sites using the theme by default exposed?

The available information identifies Angio versions through 1.1.1 as affected, but it does not state whether a particular default WordPress or theme configuration is required.

CVE-2026-62021: WordPress Angio theme <= 1.1.1 - PHP Object Injection vulnerability

Affected Software

Event History

Frequently Asked Questions

Who can exploit this issue?

What level of impact could successful exploitation have?

Are sites using the theme by default exposed?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

What level of impact could successful exploitation have?

Are sites using the theme by default exposed?