cve.nowby Sazabi

← All vulnerabilities

CVE-2026-54856EUVD-2026-112948

WordPress RexCoin theme <= 1.2.6 - PHP Object Injection vulnerability

Published: —
Last modified: —
Status: published
Known exploitation: Not listed in CISA KEV
Public exploit: None on Exploit-DB, Metasploit or GitHub
On X: View the cve.now post

Summary

Unauthenticated PHP Object Injection in RexCoin <= 1.2.6 versions.

Timeline

—CVE published
—Record last updated
—First seen by cve.now
—Posted on X by cve.now

Affected versions

ThemeREX RexCoin
through 1.2.6

References 1

patchstack.com

database/wordpress/theme/rexcoin/vulnerability/wordpress-rexcoin-theme-1-2-6-php-object-injection-vulnerability?_s_id=cve