Description
Unauthenticated PHP Object Injection in Photolia <= 1.0.3 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| ThemeRex | Photolia | ≤ 1.0.3 | — |
Critical · 9.8
CVE-2026-78535
EUVD-2026-96530GHSA-rfhw-cf7w-cjpq
WordPress Photolia theme <= 1.0.3 - PHP Object Injection vulnerability
Published Oct 10, 2026 · Updated Oct 11, 2026 · Assigned by Patchstack