← All advisories

Critical severity9.8NVD Advisory· Published Oct 10, 2026

CVE-2026-66482

CVE-2026-66482

Description

Unauthenticated PHP Object Injection in Drone Media <= 2.2.0 versions.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2

WordPress/Drone Mediallm-create2 versions
<=2.2.0+ 1 more
- (no CPE)range: <=2.2.0
- (no CPE)range: <=2.2.0
Package: https://wordpress.org/themes/drone-media

Patches

Vulnerability mechanics

References

1

patchstack.com/database/wordpress/theme/drone-media/vulnerability/wordpress-drone-media-theme-2-2-0-php-object-injection-vulnerabilitynvd

News mentions

0

No linked articles in our index yet.