WordPress Entrepreneur - Booking for Small Businesses WordPress Theme theme < 3.1.5 - PHP Object Injection vulnerability

Why this deserves its current priority

A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.

Affected scope and exposure questions

The current feed maps Pixel Makers Creative INC./Entrepreneur - Booking for Small Businesses WordPress Theme (generic). Check affected ranges and fixed versions before updating.

Recommended response

1. 1Check inventory. Check lockfiles and deployed manifests for Pixel Makers Creative INC./Entrepreneur - Booking for Small Businesses WordPress Theme.
2. 2Review the reported fix. Update Pixel Makers Creative INC./Entrepreneur - Booking for Small Businesses WordPress Theme to 3.1.5 if you use the affected versions. Test the change in a non-production environment first.

Evidence timeline and material changes

1. Published upstream

   Jun 17, 2026

   Evidence: source:cvelist:source_dates:source-dates:record

2. Source modified

   Sep 14, 2026

   Evidence: source:cvelist:source_dates:source-dates:record

3. First seen by HOL

   Sep 14, 2026

Sources and claim methodology

• Source referencepatchstack.com

Related CVEs

• LightLLM through 1.2.0 Unauthenticated Remote Code Execution via Config Server Pickle DeserializationAlso CWE-502
• Playbooks channel action update validation issueSame generic ecosystem
• Unauthenticated webhook request with null notification entry could crash the Microsoft Calendar plugin.Same generic ecosystem
• Fix authenticated members disabling file content indexing server-wide via extraction pool exhaustionSame generic ecosystem
• Inadequate access control in the Hiperdino REST APISame generic ecosystem
• Mattermost Markdown autolink parsing denial of serviceSame generic ecosystem