CVE-2026-81797

Received Received - Intake

Unauthenticated PHP Object Injection in Buzz Stone WordPress Theme

Publication date: 2026-10-10

Last updated on: 2026-10-10

Assigner: Patchstack

Description

Unauthenticated PHP Object Injection in Buzz Stone | Magazine & Viral Blog WordPress Theme <= 1.0.2 versions.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-10

Last Modified

2026-10-10

Generated

2026-10-11

AI Q&A

2026-10-11

EPSS Evaluated

N/A

NVD

CVE-2026-81797

EUVD

EUVD-2026-96531

Affected Vendors & Products

Vendor	Product	Version / Range
ThemeRex	Buzz	Stone \| Magazine & Viral Blog WordPress Theme n/a

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-502	The product deserializes untrusted data without sufficiently ensuring that the resulting data will be valid.

Attack-Flow Graph

Executive Summary

This is an unauthenticated PHP Object Injection vulnerability in the Buzz Stone WordPress theme versions 1.0.2 or lower. It allows attackers to inject malicious PHP objects into the site, potentially leading to remote code execution or other harmful server actions without requiring authentication.

Detection Guidance

Check if the Buzz Stone WordPress theme version 1.0.2 or lower is installed. Look for suspicious activity like unexpected server requests or file modifications. Use security plugins to scan for PHP Object Injection attempts.

Impact Analysis

This vulnerability can allow attackers to take full control of your WordPress site, steal sensitive data, deface the site, or use it as a launchpad for further attacks. Since it is highly exploitable (CVSS 9.8), mass campaigns targeting thousands of sites are likely.

Mitigation Strategies

Apply Patchstack's mitigation rule if available. Contact your hosting provider or developer for assistance. Consider temporarily disabling the theme until an official patch is released. Monitor logs for exploitation attempts.

Hi! I’m here to help you understand CVE-2026-81797. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70