Threats tagged 'ghsa-gpgj-3x64-9wv8'

CVE-2026-65578 is a critical vulnerability in AncoraThemes Agora versions 1.9 and earlier. It involves unauthenticated PHP Object Injection due to deserialization of untrusted data, classified under CWE-502. The vulnerability allows remote attackers to execute arbitrary code without authentication. The CVSS 3.1 score is 9.8, indicating a high impact on confidentiality, integrity, and availability.