Description
Deserialization of Untrusted Data vulnerability in Themify Themify Popup allows Object Injection.
This issue affects Themify Popup: from n/a through 1.4.3.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Themify | Themify Popup | ≤ 1.4.3 | — |
High · 8.8
CVE-2026-56037
EUVD-2026-41322GHSA-2vg7-9fw4-fmph
WordPress Themify Popup plugin <= 1.4.3 - PHP Object Injection vulnerability
Published Jul 2, 2026 · Updated Jul 2, 2026 · Assigned by Patchstack