CRITICAL
9.8 CVE-2026-112851 Published 23 Oct 2026
ThemeREX HotLock Plugin Object Injection Vulnerability
Worried this affects your website?
A Deserialization of Untrusted Data vulnerability has been found in ThemeREX Group HotLock.
The flaw allows Object Injection attacks. This issue affects HotLock from n/a through 1.3.9.
Reference: CVE-2026-112851 on NVD
← Back to Security News