VYPR

noo-citilights

by WordPress

CVEs (1)

  • CVE-2026-24974HigMar 25, 2026
    risk 0.57cvss 8.8epss 0.00

    Deserialization of Untrusted Data vulnerability in NooTheme CitiLights noo-citilights allows Object Injection.This issue affects CitiLights: from n/a through <= 3.7.1.