CVE-2026-112857

WordPress Reprizo theme <= 1.0.8 - PHP Object Injection vulnerability

axiomthemes Reprizo

CVSS

9.8Critical

ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV

Exploit odds (EPSS)0.56%Chance of exploitation activity in the next 30 days, higher than 46% of CVEs. Scored 24 Oct 2026FIRST EPSS

Fixed inNone listedNo source names a fixed version yet

Published23 Oct 2026Updated 23 Oct 2026CVE List

What fixes it

No source in this snapshot names a fixed version.

Reports 1

1 outlet mention it. Reports are not confirmation; each links to its source.

@stackflag.bsky.social: CVE-2026-112857 - reprizo The Reprizo theme for WordPress (versions up to 1.0.8) can be fooled into processing crafted data, which may cause the site to execute harmful code. This Bluesky: CVE posts, 23 Oct 2026

Description

Deserialization of Untrusted Data vulnerability in axiomthemes Reprizo reprizo allows Object Injection.This issue affects Reprizo: from n/a through 1.0.8.

Text from CVE List

Affected versions 1

Reprizoaffected: all versions through 1.0.8CVE List

References 1

patchstack.com/database/wordpress/theme/reprizo/vulnerability/wordpress-reprizo-theme-1-0-8-php-object-injection-vulnerability?_s_id=cveReferencevia CVE List