CVE-2026-81797

Summary

A PHP object injection vulnerability in the Buzz Stone WordPress theme allows unauthenticated attackers to inject arbitrary PHP objects, leading to potential remote code execution and complete system compromise.

Exploitability

Exploitation is relatively straightforward with no authentication required, though it may need a specific request pattern to trigger the deserialization process.

Blast radius

The vulnerability could affect thousands of WordPress sites using the Buzz Stone theme version 1.0.2 or earlier, potentially leading to widespread unauthorized access and content manipulation.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to Buzz Stone theme version 1.0.3 or later to remediate this vulnerability.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.