Description
Deserialization of Untrusted Data vulnerability in rascals Vex vex allows Object Injection.This issue affects Vex: from n/a through < 1.2.9.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| rascals | Vex | ≤ 1.2.9 | — |
High · 8.8
CVE-2026-25360
EUVD-2026-15684
WordPress Vex theme < 1.2.9 - PHP Object Injection vulnerability
Published Mar 25, 2026 · Updated Apr 28, 2026 · Assigned by Patchstack