CVE-2026-62086: WordPress Juno theme <= 2.25 - PHP Object Injection vulnerability
Published Oct 10, 2026
·Updated
Unauthenticated PHP Object Injection in Juno <= 2.25 versions.
Affected Software
1 affected component
WordPress Juno theme<=2.25
Event History
Oct 10, 2026
CVE Published
via MITRE·07:35 PM
Data Sourced
via MITRE·07:35 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·08:16 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Who can exploit this issue?
The issue is described as unauthenticated, so exploitation does not require a WordPress account or prior authentication.
2
Which deployments are affected?
WordPress sites using the Juno theme version 2.25 or earlier are affected according to the available information.
3
Does exploitation require user interaction or special conditions?
The supplied severity vector indicates network access, low attack complexity, no privileges, and no user interaction are required. It also indicates high potential impact to confidentiality, integrity, and availability.