CVE-2026-42415

The Porto Theme versions up to 3.9.3 are vulnerable to an unauthenticated SQL injection, allowing attackers to execute arbitrary SQL queries and potentially gain unauthorized access to sensitive data. This critical vulnerability poses a significant risk to any website utilizing the affected theme, making it imperative for developers and site administrators to prioritize immediate updates or mitigations. Organizations relying on this theme should act swiftly to safeguard their systems against potential exploitation.