High · 8.1 CVE-2026-27096 EUVD-2026-13053

WordPress ColorFolio - Freelance Designer WordPress Theme theme <= 1.3 - Deserialization of untrusted data vulnerability

Published Mar 19, 2026 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: BuddhaThemes Product: ColorFolio - Freelance Designer WordPress Theme Category: Web / CMS

Description

Deserialization of Untrusted Data vulnerability in BuddhaThemes ColorFolio - Freelance Designer WordPress Theme allows Object Injection.This issue affects ColorFolio - Freelance Designer WordPress Theme: from n/a through 1.3.

Affected products

Vendor	Product	Affected	Fixed
BuddhaThemes	ColorFolio - Freelance Designer WordPress Theme	≤ 1.3	—

References

https://patchstack.com/database/wordpress/theme/colorfolio/vulnerability/wordpress-colorfolio-freelance-designer-wordpress-theme-theme-1-3-deserialization-of-untrusted-data-vulnerability?_s_id=cve vdb-entry