CVE-2026-62046: WordPress Gutentype theme <= 2.1.12 - PHP Object Injection vulnerability
Published Oct 10, 2026
·Updated
Deserialization of Untrusted Data vulnerability in ThemeREX Group Gutentype gutentype allows Object Injection.This issue affects Gutentype: from n/a through 2.1.12.
Affected Software
1 affected component
ThemeREX Group Gutentype<=2.1.12
Event History
Oct 10, 2026
CVE Published
via MITRE·07:00 AM
Data Sourced
via MITRE·07:00 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·08:17 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Who can exploit this issue?
The CVSS vector indicates that exploitation is network-accessible, requires no privileges, and needs no user interaction. An unauthenticated remote attacker could exploit it if they can reach the vulnerable functionality.
2
Which versions are affected?
Gutentype versions through 2.1.12 are affected. The available data does not identify a fixed version.
3
What is the potential impact?
The issue is rated critical with high impacts to confidentiality, integrity, and availability. Successful object injection could result in severe compromise of affected WordPress sites, depending on available application components and object behavior.