Description
Deserialization of Untrusted Data vulnerability in Elated-Themes Leroux leroux allows Object Injection.This issue affects Leroux: from n/a through < 1.4.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Elated-Themes | Leroux | ≤ < 1.4 | — |
Medium · 5.4
CVE-2026-32507
EUVD-2026-15861GHSA-x46f-v56p-c92m
WordPress Leroux theme < 1.4 - Arbitrary Object Instantiation vulnerability
Published Mar 25, 2026 · Updated Apr 29, 2026 · Assigned by Patchstack