CVE-2026-39442

Unauthenticated PHP Object Injection in PressMart <= 1.2.26 versions.

Credits

Phat RiO | Patchstack Bug Bounty Program

References

https://patchstack.com/database/wordpress/theme/presssmart/vulnerability/wordpress-pressmart-theme-1-2-26-php-object-injection-vulnerability?_s_id=cve