WordPress Betheme Theme <= 26.5.1.4 is vulnerable to PHP Object Injection

6.3

Medium severity CVSS 3.1 score

Known to be exploited Active attempts logged

Protect your sites with automated security

Enable Protection

Solution

Fixed

Update the WordPress Betheme theme to the latest available version (at least 26.6).

Details

Show technical details

Verified

Dave Jong (Patchstack) discovered and reported this PHP Object Injection vulnerability in WordPress Betheme Theme. This could allow a malicious actor to execute code injection, SQL injection, path traversal, denial of service, and more. This could allow a malicious actor to take-over a website. This vulnerability has been fixed in version 26.6.