CVE-2026-94064: Buddhathemes Neo | Barber Shop WordPress Theme

High severity, CVSS 8.8. EPSS: 0.3% chance of exploitation in the next 30 days.

Deserialization of Untrusted Data vulnerability in BuddhaThemes Neo | Barber Shop WordPress Theme neocut allows Object Injection.This issue affects Neo | Barber Shop WordPress Theme: from n/a through 3.5.

Affected products

• Buddhathemes Neo | Barber Shop WordPress Theme: up to and including 3.5

Published 2026-10-09. Last modified 2026-10-09.