Skip to content
OpenAdvisories
High · 7.5 Public exploit CVE-2024-24926 EUVD-2024-22289GHSA-69rp-qxv8-mf6r

WordPress Brooklyn Theme <= 4.9.7.6 is vulnerable to PHP Object Injection

Published Feb 12, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: United Themes Product: Brooklyn | Creative Multi-Purpose Responsive WordPress Theme Category: Web / CMS

Description

Deserialization of Untrusted Data vulnerability in UnitedThemes Brooklyn | Creative Multi-Purpose Responsive WordPress Theme.This issue affects Brooklyn | Creative Multi-Purpose Responsive WordPress Theme: from n/a through 4.9.7.6.

Affected products

VendorProductAffectedFixed
UnitedThemes Brooklyn | Creative Multi-Purpose Responsive WordPress Theme ≤ 4.9.7.6 —

Public exploits

Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.

Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.

GitHub 1 repository

  • moften/CVE-2024-24926 ★ 0 · Dec 10, 2024

    Vulnerabilidad CVE-2024-24926 afecta al tema Brooklyn de WordPress

Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.

References