Medium · 5.4 CVE-2026-32508 EUVD-2026-15862GHSA-p662-9cjc-934w

WordPress Halstein theme < 1.8 - Arbitrary Object Instantiation vulnerability

Published Mar 25, 2026 · Updated Apr 29, 2026 · Assigned by Patchstack

Description

Deserialization of Untrusted Data vulnerability in Mikado-Themes Halstein halstein allows Object Injection.This issue affects Halstein: from n/a through < 1.8.

Affected products

Vendor	Product	Affected	Fixed
Mikado-Themes	Halstein	≤ < 1.8	—

References

https://patchstack.com/database/Wordpress/Theme/halstein/vulnerability/wordpress-halstein-theme-1-8-arbitrary-object-instantiation-vulnerability?_s_id=cve vdb-entry

CNA	v3.1	5.4
EUVD	v3.1	5.4
CISA-ADP	v3.1	5.4