CVE-2026-96831 Contributor PHP Object Injection in Themify Builder <= 7.8.1 versions

Description

Contributor PHP Object Injection in Themify Builder <= 7.8.1 versions.

Affected products and versions

Product	Affected versions	Fixed in
Themify Builder 7.8	earliest → 7.8.1	No fix stated

Other CVEs of Themify Builder

The 16 CVEs of Themify Builder →

CVE-2026-115869 The Themify Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'variations' repeater… 6.4 Medium CVE-2026-111726 The Themify Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'visible' Shortcode… 6.4 Medium CVE-2026-95864 The Themify Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'css[fonts]' Parameter in… 7.2 High CVE-2026-75027 The Themify Builder plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including,… 5.3 Medium