CVE-2026-112855
WordPress Redy theme <= 1.3.5 - PHP Object Injection vulnerability
axiomthemes Redy
CVSS
9.8CriticalExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)No scoreNo FIRST EPSS score in this snapshot yet
Fixed inNone listedNo source names a fixed version yet
What fixes it
No source in this snapshot names a fixed version.
Description
Deserialization of Untrusted Data vulnerability in axiomthemes Redy redy allows Object Injection.This issue affects Redy: from n/a through 1.3.5.
Text from CVE List
Affected versions 1
- Redyaffected: all versions through 1.3.5CVE List