CVE-2026-81797: WordPress Buzz Stone | Magazine & Viral Blog WordPress Theme theme <= 1.0.2 - PHP Object Injection vulnerability
Published Oct 10, 2026
·Updated
Unauthenticated PHP Object Injection in Buzz Stone | Magazine & Viral Blog WordPress Theme <= 1.0.2 versions.
Affected Software
1 affected component
Buzz Stone | Magazine & Viral Blog WordPress Theme<=1.0.2
Event History
Oct 10, 2026
CVE Published
via MITRE·07:36 PM
Data Sourced
via MITRE·07:36 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·08:16 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Who can exploit this issue?
The vulnerability is unauthenticated, so an attacker does not need a WordPress account or prior access to the site. The listed vector is network-accessible with low attack complexity and no user interaction required.
2
Which installations are affected?
Sites using the Buzz Stone | Magazine & Viral Blog WordPress Theme version 1.0.2 or earlier are affected according to the provided data.
3
What impact could successful exploitation have?
The issue is rated critical with high confidentiality, integrity, and availability impact. Successful exploitation could therefore expose data, enable unauthorized modification, and disrupt site availability.