CVE-2026-12256HIGH NVDCVSS Score 8.8Severity HIGHPublished Jun 17, 2026Vendor unknownDescriptionContributor PHP Object Injection in Avada <= 3.15.3 versions.Referenceshttps://patchstack.com/database/wordpress/theme/avada/vulnerability/wordpress-avada-theme-3-15-3-php-object-injection-vulnerability?_s_id=cve