little-birdies vulnerabilities

CVEs whose affected-version data names the little-birdies package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-112859Critical· 9.8

yesterday

WordPress Little Birdies theme <= 1.3.16 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in ThemeREX Group Little Birdies little-birdies allows Object Injection.This issue affects Little Birdies: from n/a through 1.3.16.

▾ MidnightThemeREX Group · little-birdiesEPSS 0.56%via CVEORG