Description
Deserialization of Untrusted Data vulnerability in park_of_ideas KIDZ kidz allows Object Injection.This issue affects KIDZ: from n/a through <= 5.24.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| park_of_ideas | KIDZ | ≤ 5.24 | — |
Critical · 9.8
CVE-2026-25029
EUVD-2026-15625GHSA-hchj-8847-5v46
WordPress KIDZ theme <= 5.24 - PHP Object Injection vulnerability
Published Mar 25, 2026 · Updated Apr 28, 2026 · Assigned by Patchstack