CVE-2026-112857

CriticalCVSS 9.8

Published: 23/10/2026(UTC)Updated: 23/10/2026(UTC)Translated: 23/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.56%

46th percentile - higher than 46% of all known CVEs

Summary

The Reprizo WordPress theme contains a deserialization of untrusted data vulnerability that allows object injection. This issue affects Reprizo from n/a through 1.0.8.

Risk Assessment

Object injection may lead to unexpected code execution or data manipulation on the WordPress site. The risk applies to sites using the vulnerable theme.

Recommendation

Update the Reprizo theme to a version later than 1.0.8 if available, or remove/disable the theme until a fix is released.

Other vulnerabilities in Reprizo

CVE-2026-22326High
There is an unauthenticated local file inclusion vulnerability in Reprizo versions <= 1.0.8.

Original NVD description (English source)

Deserialization of Untrusted Data vulnerability in axiomthemes Reprizo reprizo allows Object Injection.This issue affects Reprizo: from n/a through 1.0.8.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS