Threats affecting pkg:composer/mikado-themes/zoya

CVE-2026-40756 is a high severity vulnerability in Mikado-Themes Zoya versions 1.4 and earlier. It involves unauthenticated PHP Object Injection due to deserialization of untrusted data, classified under CWE-502. This vulnerability allows an attacker to potentially execute arbitrary code or cause denial of service without requiring authentication.