Description
Unauthenticated PHP Object Injection in Nifty <= 1.4.1 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| BoldThemes | Nifty | ≤ 1.4.1 | — |
Critical · 9.8
CVE-2026-27429
EUVD-2026-37464GHSA-q6mh-x2fx-6p4w
WordPress Nifty theme <= 1.4.1 - PHP Object Injection vulnerability
Published Jun 16, 2026 · Updated Jun 17, 2026 · Assigned by Patchstack