CVE-2026-65577

Unauthenticated PHP Object Injection in Advice <= 1.18.0 versions.

Score

CVSS 3.1 9.8 Critical

Status

Deferred - audit@patchstack.com

Published

2026-08-06

Last modified

2026-10-24

Weaknesses

CWE-502

Affected products

• Advice (Ancorathemes)

References

• https://patchstack.com/database/wordpress/theme/advice/vulnerability/wordpress-advice-theme-1-18-0-php-object-injection…