CVE-2026-65571: WordPress 69 Clothing theme <= 1.2.11.1 - PHP Object Injection vulnerability

Published Aug 6, 2026

Updated

Unauthenticated PHP Object Injection in 69 Clothing <= 1.2.11.1 versions.

Affected Software

1 affected component

WordPress 69 Clothing theme<=1.2.11.1

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade WordPress 69 Clothing theme to a version that resolves this vulnerability.
Fixed in 1.2.11.1

Aug 6, 2026

CVE Published

via MITRE·02:27 PM

Data Sourced

via MITRE·02:27 PM

DescriptionSeverityWeakness

The severity of CVE-2026-65571 is critical with a score of 9.8.

CVE-2026-65571 allows unauthenticated PHP Object Injection in versions of the theme <= 1.2.11.1.

The potential impacts of CVE-2026-65571 include complete control over the affected WordPress site, leading to data theft or site defacement.

To fix CVE-2026-65571, update the WordPress 69 Clothing theme to a version higher than 1.2.11.1.

Yes, CVE-2026-65571 is exploitable remotely as it does not require authentication for execution.