VYPR

HotLock

by WordPress

CVEs (1)

  • CVE-2026-112851CriOct 23, 2026
    risk 0.64cvss 9.8epss —

    Deserialization of Untrusted Data vulnerability in ThemeREX Group HotLock hotlock allows Object Injection.This issue affects HotLock: from n/a through 1.3.9.