{"vulnerability": "cve-2026-78535", "sightings": [{"uuid": "dd323dd2-16bb-43d2-8034-99300ca8bef0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78535", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mxkdgvmafr23", "content": "\ud83d\udd34 CVE-2026-78535 - Critical (9.8)\n\nUnauthenticated PHP Object Injection in Photolia <= 1.0.3 versions.\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-78535/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-10-10T20:31:33.893319Z"}, {"uuid": "926fc6a1-48f3-4bcf-adf1-ad62caa092d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78535", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117418629288171392", "content": "CVE-2026-78535 WordPress Photolia theme <= 1.0.3 - PHP Object Injection vulnerability Unauthenticated PHP Object Injection in Photolia <= 1.0.3 versions.\nhttps://www.cve.org/CVERecord?id=CVE-2026-78535https://patchstack.com/database/wordpress/theme/photolia/vulnerability/wordpress-photolia-theme-1-0-3-php-object-injection-vulnerability?_s_id=cve#ThemeRex #Photolia#CVE_2026_78535#bot", "creation_timestamp": "2026-10-10T21:01:36.918333Z"}, {"uuid": "6f584bc1-ab50-4767-b83d-c7e960e4ebb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78535", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/2xitdbphglmcu", "content": "CVE-2026-78535 - WordPress Photolia theme\nCVE ID : CVE-2026-78535\n \n Published : Oct. 10, 2026, 8:16 p.m. | 1\u00a0hour, 6\u00a0minutes ago\n \n Description : Unauthenticated PHP Object Injection in Photolia <= 1.0.3 versions.\n \n Severity: 9.8 | CRITICAL\n \n Visit the link for more deta...", "creation_timestamp": "2026-10-10T21:50:09.765315Z"}, {"uuid": "0fd5b723-ca9f-4157-b416-20005336a3e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78535", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxkj3fj6uf27", "content": "\ud83d\udea8 CVE-2026-78535 \u2014 CVSS 9.8 CRITICAL\n\nUnauthenticated PHP Object Injection in Photolia <= 1.0.3 versions.\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-78535\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-10T22:12:30.035132Z"}, {"uuid": "3187ff09-587b-4031-8adf-87fea49ac8ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78535", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxkmubidy22n", "content": "CVE-2026-78535 - photolia\nThe Photolia theme for WordPress (versions up to 1.0.3) lets anyone send specially crafted data that can cause the server to execute unwanted code. This could let attackers take\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#photolia #themerex #CVE #infosec", "creation_timestamp": "2026-10-10T23:20:05.949053Z"}]}