CWE-502

Everything Vector Update has reported about CWE-502: 2 stories, newest first. Part of our Vulnerabilities coverage.

Block Object Injection in Booklovers Theme by Verifying Version Before 2.13.1

The NVD rates CVE-2026-62045 as critical because it allows unauthenticated attackers to inject objects via deserialization flaws in older Booklovers versions.

Oct 10, 2026

Vulnerabilities

Update ThemeREX Partiso to 1.1.13+ to Fix Critical CVE-2026-93934 Deserialization Flaw

A critical flaw in the Partiso WordPress theme allows attackers to inject objects via untrusted data, affecting versions up to 1.1.13.

Oct 10, 2026