CVE-2026-62090: WordPress WineShop theme <= 3.20 - PHP Object Injection vulnerability
Published Oct 10, 2026
·Updated
Unauthenticated PHP Object Injection in WineShop <= 3.20 versions.
Affected Software
1 affected component
WordPress WineShop<=3.20
Event History
Oct 10, 2026
CVE Published
via MITRE·07:35 PM
Data Sourced
via MITRE·07:35 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·08:16 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Who can exploit this issue?
The issue is unauthenticated, so an attacker does not need a WordPress account or other prior privileges to attempt exploitation.
2
Which installations are affected?
WordPress sites using the WineShop theme version 3.20 or earlier are affected according to the available information.
3
What impact could successful exploitation have?
The severity data indicates potential high impact to confidentiality, integrity, and availability. The supplied information does not identify the specific application behavior or gadget chain required for further exploitation.