hallelujah vulnerabilities

CVEs whose affected-version data names the hallelujah package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-112853Critical· 9.8

today

WordPress Hallelujah theme <= 1.1.1 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in axiomthemes Hallelujah hallelujah allows Object Injection.This issue affects Hallelujah: from n/a through 1.1.1.

▾ Midnightaxiomthemes · hallelujahvia CVEORG