Description
Unauthenticated PHP Object Injection in EmallShop <= 2.4.21 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| PressLayouts | EmallShop | ≤ 2.4.21 | — |
High · 8.1
CVE-2026-39443
EUVD-2026-37470GHSA-7cp3-97r2-9349
WordPress EmallShop theme <= 2.4.21 - PHP Object Injection vulnerability
Published Jun 16, 2026 · Updated Jun 17, 2026 · Assigned by Patchstack