Threats affecting pkg:composer/ancorathemes/abogado

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.8	EPSS 0.6%	CVE-2026-65574Abogado (WordPress plugin) · Deserialization of Untrusted Data Critical9.8EPSS 0.6%2026-08-06CVE Database V5CVE-2026-65574 CVE-2026-65574 is a critical vulnerability in AncoraThemes Abogado versions up to and including 1.18. It involves unauthenticated PHP Object Injection due to deserialization of untrusted data (CWE-502). The vulnerability has a high CVSS score of 9.8, indicating it allows remote attackers to execute arbitrary code without any privileges or user interaction. EPSS 0.6%Vulnerability AncoraThemes CWE-502 #ghsa-w8mx-r4v3-qrr3	CVE Database V5	2026-08-06

Page 1 of 1