Home Tools CVE CVE-2026-39577
MEDIUM

CVE-2026-39577

2026-06-17 CVSS v3.1
CVSS
5.5

Description

Unauthenticated PHP Object Injection in Playroom <= 1.4.1 versions.

Weakness (CWE)

CWE-502 Deserialization of Untrusted Data

EPSS Score

0.21%
Probability of exploitation in next 30 days
10.9th percentile

References

https://patchstack.com/database/wordpress/theme/playroom/vulnerability/wordpress-playroom-theme-1-4-1-php-object-injection-vulnerability?_s_id=cve
View on dbcve.org
Base CVE data derived from NVD (public domain). Enrichment by dbcve.org (CC-BY-4.0). Fetched via API.
Back to CVE