Threats affecting pkg:composer/presslayouts/alukas

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	8.1	EPSS 0.4%	CVE-2026-39445Alukas (WordPress plugin) · Deserialization of Untrusted Data High8.1EPSS 0.4%2026-06-17CVE Database V5CVE-2026-39445 CVE-2026-39445 is a high-severity vulnerability in PressLayouts Alukas versions prior to 3.0.0. It involves unauthenticated PHP object injection due to deserialization of untrusted data (CWE-502). This flaw allows remote attackers to execute arbitrary code, impacting confidentiality, integrity, and availability of the affected system. EPSS 0.4%Vulnerability PressLayouts CWE-502	CVE Database V5	2026-06-17

Page 1 of 1