CVE-2026-112846Critical· 9.8▾ MidnightDeserialization of Untrusted Data vulnerability in ThemeREX Group Save Life save-life allows Object Injection.This issue affects Save Life: from n/a through 1.2.14.
▾ Midnight zone — Critical, or high with PoC / in-the-wild
impact 53.9 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Deserialization of Untrusted Data vulnerability in ThemeREX Group Save Life save-life allows Object Injection.This issue affects Save Life: from n/a through 1.2.14.
save-life <= 1.2.14Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-112859Critical· 9.8WordPress Little Birdies theme <= 1.3.16 - PHP Object Injection vulnerability
CVE-2026-112856Critical· 9.8WordPress Vagabonds theme <= 1.3.10 - PHP Object Injection vulnerability
CVE-2026-112852High· 8.1WordPress Helion theme <= 1.1.12 - PHP Object Injection vulnerability
CVE-2026-112851Critical· 9.8WordPress HotLock theme <= 1.3.9 - PHP Object Injection vulnerability
CVE-2026-93944Critical· 9.8Deserialization of Untrusted Data vulnerability in ThemeREX Group Camelia camelia allows Object Injection.This issue affects Camelia: from n/a through 1.2.15.
CVE-2026-93943Critical· 9.8Deserialization of Untrusted Data vulnerability in ThemeREX Group Convex convex allows Object Injection.This issue affects Convex: from n/a through 1.16.0.