Ozisti
Monthly
Ozisti WordPress theme 1.1.10 and earlier carries an unauthenticated PHP object injection issue rated CVSS 9.8, and the vuln.today decision label is act_now; the finding is reported by Patchstack. The CVSS vector indicates network reachability with no privileges or user interaction, but the available sources do not describe the specific injection point or confirm that an exploitable PHP gadget chain is present. No public exploit was identified at time of analysis, and no KEV active-exploitation signal is present in the provided data.
Ozisti WordPress theme 1.1.10 and earlier carries an unauthenticated PHP object injection issue rated CVSS 9.8, and the vuln.today decision label is act_now; the finding is reported by Patchstack. The CVSS vector indicates network reachability with no privileges or user interaction, but the available sources do not describe the specific injection point or confirm that an exploitable PHP gadget chain is present. No public exploit was identified at time of analysis, and no KEV active-exploitation signal is present in the provided data.