CVE-2026-65571

Name of the Vulnerable Software and Affected Versions 69 Clothing versions prior to 1.2.11.2

Description The 69 Clothing | Brand Store & Fashion Boutique WordPress Theme is susceptible to PHP Object Injection, a condition where an application deserializes untrusted input, allowing an attacker to inject PHP objects. While no native POP chain (a sequence of gadgets used to achieve code execution) is present in the theme itself, the presence of a POP chain via other installed plugins or themes could enable an unauthenticated attacker to execute code, retrieve sensitive data, or delete arbitrary files.

Recommendations Update to a version newer than 1.2.11.1.