CVE-2026-23544
Deserialization Object Injection in codetipi Valenti
Publication date: 2026-02-19
Last updated on: 2026-02-19
Assigner: Patchstack
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| codetipi | valenti | to 5.6.3.5 (inc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-502 | The product deserializes untrusted data without sufficiently ensuring that the resulting data will be valid. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
CVE-2026-23544 is a PHP Object Injection vulnerability found in the WordPress Valenti Theme versions up to and including 5.6.3.5. It allows an attacker to inject malicious code by exploiting the deserialization of untrusted data. This can lead to various attacks such as code injection, SQL injection, path traversal, and denial of service if a suitable PHP Object Injection Property Oriented Programming (POP) chain is available.
The vulnerability requires contributor or developer privileges to exploit and falls under the OWASP Top 10 category A3: Injection.
How can this vulnerability impact me? :
If exploited, this vulnerability can allow a malicious actor to perform several harmful actions including:
- Code injection
- SQL injection
- Path traversal
- Denial of service
These impacts can compromise the security and availability of your website, potentially leading to data breaches, unauthorized access, or service outages.
How does this vulnerability affect compliance with common standards and regulations (like GDPR, HIPAA)?:
I don't know
How can this vulnerability be detected on my network or system? Can you suggest some commands?
CVE-2026-23544 is a PHP Object Injection vulnerability affecting the WordPress Valenti Theme up to version 5.6.3.5. Detection typically involves monitoring for exploitation attempts that use PHP Object Injection techniques.
While no specific detection commands are provided, users can monitor web server logs for suspicious requests that may indicate attempts to exploit object injection, such as unusual serialized PHP objects or payloads in POST or GET parameters.
Applying the mitigation rule issued by Patchstack can also help detect and block exploitation attempts.
What immediate steps should I take to mitigate this vulnerability?
Since no official patch exists yet for CVE-2026-23544, the immediate recommended step is to apply the mitigation rule provided by Patchstack to block exploitation attempts.
Users should apply this mitigation immediately to protect their websites from potential code injection, SQL injection, path traversal, denial of service, and other attacks enabled by this vulnerability.
Additionally, monitoring for suspicious activity and restricting contributor or developer privileges can reduce the risk of exploitation.