CVE-2026-62077: Boldthemes Avala
Critical severity, CVSS 9.8.
Unauthenticated PHP Object Injection in Avala <= 1.1.4 versions.
Affected products
- Boldthemes Avala: up to and including 1.1.4
Published 2026-10-10. Last modified 2026-10-10.
Critical severity, CVSS 9.8.
Unauthenticated PHP Object Injection in Avala <= 1.1.4 versions.
Published 2026-10-10. Last modified 2026-10-10.