Rascals vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Rascals products: 5 record(s), with severity, exploitation and fixes.

Meloo 1 Pendulum 1 Vex 1 Noisa 1 Angio 1

Exploited only (KEV) →

CVE-2026-62021 High · 8.8 CWE-502 Oct 10, 2026

WordPress Angio theme <= 1.1.1 - PHP Object Injection vulnerability

Subscriber PHP Object Injection in Angio <= 1.1.1 versions.

CVE-2026-25360 High · 8.8 CWE-502 Mar 25, 2026

WordPress Vex theme < 1.2.9 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in rascals Vex vex allows Object Injection.This issue affects Vex: from n/a through < 1.2.9.

CVE-2026-25359 High · 8.8 CWE-502 Mar 25, 2026

WordPress Pendulum theme < 3.1.5 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in rascals Pendulum pendulum allows Object Injection.This issue affects Pendulum: from n/a through < 3.1.5.

CVE-2026-25358 High · 8.8 CWE-502 Mar 25, 2026

WordPress Meloo theme < 2.8.2 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in rascals Meloo meloo allows Object Injection.This issue affects Meloo: from n/a through < 2.8.2.

CVE-2025-60039 Critical · 9.8 CWE-502 Oct 22, 2025

WordPress Noisa theme <= 2.6.0 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in rascals Noisa noisa allows Object Injection.This issue affects Noisa: from n/a through <= 2.6.0.