CVE ID :CVE-2026-62045 Published : Oct. 10, 2026, 7 a.m. | 29 minutes ago Description :Deserialization of Untrusted Data vulnerability in ThemeREX Group Booklovers booklovers allows Object Injection.This issue affects Booklovers: from n/a through 2.13.0. Severity: 9.8 | CRITICAL Visit...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-62045 - WordPress Booklovers theme <= 2.13.0 - PHP Object Injection vulnerability

VERWANDTEARTIKEL

CVE-2025-64393

CVE-2026-62046 - WordPress Gutentype theme <= 2.1.12 - PHP Object Injection vulnerability

CVE-2026-93927 - WordPress Veto theme <= 1.6.0 - PHP Object Injection vulnerability

CVE-2026-93929 - WordPress Travesia theme <= 1.1.16 - PHP Object Injection vulnerability

CVE-2026-94538 - WP File Download <= 6.3.9 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Deletion/Modification via 'task' Parameter to Multiple Functions

CVE-2026-104801 - PPOM <= 34.0.10 - Unauthenticated Arbitrary File Deletion via 'ppom[fields][<data_name>][n][org]' Parameter