Description
Unauthenticated PHP Object Injection in Moderno < 1.43 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| park_of_ideas | Moderno | < 1.43 | 1.43 |
Critical · 9.8
CVE-2026-49108
EUVD-2026-37698GHSA-5gqc-wqm6-m85x
WordPress Moderno theme < 1.43 - PHP Object Injection vulnerability
Published Jun 17, 2026 · Updated Jun 17, 2026 · Assigned by Patchstack