Critical · 9.8 CVE-2026-32512 EUVD-2026-15868GHSA-w68h-wpmm-q4p8

WordPress Pelicula theme < 1.10 - PHP Object Injection vulnerability

Published Mar 25, 2026 · Updated Apr 29, 2026 · Assigned by Patchstack

Description

Deserialization of Untrusted Data vulnerability in Edge-Themes Pelicula pelicula-video-production-and-movie-theme allows Object Injection.This issue affects Pelicula: from n/a through < 1.10.

Affected products

Vendor	Product	Affected	Fixed
Edge-Themes	Pelicula	≤ < 1.10	—

References

https://patchstack.com/database/Wordpress/Theme/pelicula-video-production-and-movie-theme/vulnerability/wordpress-pelicula-theme-1-10-php-object-injection-vulnerability?_s_id=cve vdb-entry

CNA	v3.1	9.8
EUVD	v3.1	9.8
CISA-ADP	v3.1	9.8