PULSEUnderground Intel

LIVE34signals / 24h

FEED

ransomplay reclama a Signature Services · Professional Servicesransomplay reclama a GCATS Investments · US · Financial Servicesransomplay reclama a Platinum Group · SG · Manufacturingransomlynx reclama a www.jerryleigh.com · US · Otherransomlynx reclama a www.talbotdes.org · GB · Otherransomgammax reclama a King International LLC · US · Otherransomqilin reclama a AmSpec · US · Energy & Utilitiesransomqilin reclama a ALIZE (alize-sud.fr) · FR · Professional Servicesransomqilin reclama a Jakle & Alexander · US · Not Foundransomqilin reclama a Akuur Law Firm · TR · Professional Servicesransomqilin reclama a J&T Bank and Trust · US · Financial Servicesransombravox reclama a MITC AG · CH · Otherransomakira reclama a Basic Grain Products · Agriculture and Food Productionransomakira reclama a Pharma Test Apparatebau AG · CH · Manufacturingransomplay reclama a Signature Services · Professional Servicesransomplay reclama a GCATS Investments · US · Financial Servicesransomplay reclama a Platinum Group · SG · Manufacturingransomlynx reclama a www.jerryleigh.com · US · Otherransomlynx reclama a www.talbotdes.org · GB · Otherransomgammax reclama a King International LLC · US · Otherransomqilin reclama a AmSpec · US · Energy & Utilitiesransomqilin reclama a ALIZE (alize-sud.fr) · FR · Professional Servicesransomqilin reclama a Jakle & Alexander · US · Not Foundransomqilin reclama a Akuur Law Firm · TR · Professional Servicesransomqilin reclama a J&T Bank and Trust · US · Financial Servicesransombravox reclama a MITC AG · CH · Otherransomakira reclama a Basic Grain Products · Agriculture and Food Productionransomakira reclama a Pharma Test Apparatebau AG · CH · Manufacturing

CVE WatchAug 6, 2026

CVE-2026-65577

Unauthenticated PHP Object Injection in Advice <= 1.18.0 versions.

CVSS

9.8

Critical

EPSS

—

KEV

—

Exploit Today

—

0-100

Published: Aug 6, 2026 · Last modified: Aug 6, 2026 · CWE-502

EPSS · 30d

Not enough EPSS history yet.

Technical description

Unauthenticated PHP Object Injection in Advice <= 1.18.0 versions.

Official references

patchstack.comhttps://patchstack.com/database/wordpress/theme/advice/vulnerability/wordpress-advice-theme-1-18-0-php-object-injection-vulnerability?_s_id=cve

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2026-655819.8 CRI

———Unauthenticated PHP Object Injection in AI ANN <= 1.29.0 versions.8h CVE-2026-655799.8 CRI

———Unauthenticated PHP Object Injection in Agricola <= 1.21.0 versions.7h CVE-2026-655789.8 CRI

———Unauthenticated PHP Object Injection in Agora <= 1.9 versions.8h CVE-2026-655769.8 CRI

———Unauthenticated PHP Object Injection in Adrena <= 1.2.14 versions.7h CVE-2026-655759.8 CRI

———Unauthenticated PHP Object Injection in Accalia <= 1.5.3 versions.8h CVE-2026-655749.8 CRI

———Unauthenticated PHP Object Injection in Abogado <= 1.18 versions.7h