8.8 High

CVE-2026-56037 Deserialization of Untrusted Data vulnerability in Themify Themify Popup allows Object Injection

Description

Deserialization of Untrusted Data vulnerability in Themify Themify Popup allows Object Injection. This issue affects Themify Popup: from n/a through 1.4.3.

Affected products and versions

Product	Affected versions	Fixed in
Themify Popup 1.4	earliest → 1.4.3	No fix stated

Do you use Themify Popup?

Track this CVE Watch Themify Popup Check my SBOMs

www.cveye.io/en/cve/CVE-2026-56037

Timeline

Published July 2, 2026
Last modified July 2, 2026

References

patchstack.com patchstack.com

Track this CVE