9.8
Critical
CVE-2026-22451 Deserialization of Untrusted Data vulnerability in AncoraThemes Handyman handyman-services allows Object…
Description
Deserialization of Untrusted Data vulnerability in AncoraThemes Handyman handyman-services allows Object Injection.This issue affects Handyman: from n/a through <= 1.4.7.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Handyman 1.4 | earliest → 1.4.7 | No fix stated |