CVE-2026-25029
WordPress KIDZ theme <= 5.24 - PHP Object Injection vulnerability
CVSS Score
9.8
EPSS Score
0.0%
EPSS Percentile
6th
Deserialization of Untrusted Data vulnerability in park_of_ideas KIDZ kidz allows Object Injection.This issue affects KIDZ: from n/a through <= 5.24.
| CWE | CWE-502 |
| Vendor | park_of_ideas |
| Product | kidz |
| Published | Mar 25, 2026 |
| Last Updated | Mar 26, 2026 |
Stay Ahead of the Next One
Get instant alerts for park_of_ideas kidz
Be the first to know when new critical vulnerabilities affecting park_of_ideas kidz are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
park_of_ideas / KIDZ
n/a ≤ <= 5.24
References
Credits
João Pedro S Alcântara (Kinorth) | Patchstack Bug Bounty Program