← All advisories

Unrated severityNVD Advisory· Published Jul 2, 2026· Updated Jul 2, 2026

WordPress Themify Popup plugin <= 1.4.3 - PHP Object Injection vulnerability

CVE-2026-56037

Description

Deserialization of Untrusted Data vulnerability in Themify Themify Popup allows Object Injection.

This issue affects Themify Popup: from n/a through 1.4.3.

Affected products

1

WordPress/Themify Popupllm-fuzzy
Range: <=1.4.3
Package: https://wordpress.org/plugins/themify-popup

Patches

Vulnerability mechanics

References

1

patchstack.com/database/wordpress/plugin/themify-popup/vulnerability/wordpress-themify-popup-plugin-1-4-3-php-object-injection-vulnerabilitymitrevdb-entry

News mentions

0

No linked articles in our index yet.