9.8
Critical
CVE-2026-112851 Deserialization of Untrusted Data vulnerability in ThemeREX Group HotLock hotlock allows Object Injection.This issue…
Description
Deserialization of Untrusted Data vulnerability in ThemeREX Group HotLock hotlock allows Object Injection.This issue affects HotLock: from n/a through 1.3.9.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| HotLock 1.3 | earliest → 1.3.9 | No fix stated |