Monitor vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.8

AxiomThemes Estate estate: Untrusted Data Can Execute Malicious Code

CVE-2026-22475
Summary

A security weakness in AxiomThemes Estate estate allows attackers to inject malicious code. This affects Estate versions up to 1.3.4. Users should update to a fixed version to prevent unauthorized code execution.

Original title
Deserialization of Untrusted Data vulnerability in axiomthemes Estate estate allows Object Injection.This issue affects Estate: from n/a through <= 1.3.4.
Original description
Deserialization of Untrusted Data vulnerability in axiomthemes Estate estate allows Object Injection.This issue affects Estate: from n/a through <= 1.3.4.
Vulnerability type
CWE-502 Deserialization of Untrusted Data
Published: 5 Mar 2026 · Updated: 13 Mar 2026 · First seen: 6 Mar 2026