Description
Unauthenticated PHP Object Injection in FC United <= 1.1.1 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| axiomthemes | FC United | ≤ 1.1.1 | — |
Critical · 9.8
CVE-2026-66565
EUVD-2026-96519GHSA-gpxw-g22x-43pr
WordPress FC United theme <= 1.1.1 - PHP Object Injection vulnerability
Published Oct 10, 2026 · Updated Oct 11, 2026 · Assigned by Patchstack