CVE-2026-62011EUVD-2026-112974
WordPress Bonbon theme <= 1.11 - PHP Object Injection vulnerability
- Published
- Last modified
- Status
- published
- Known exploitation
- Not listed in CISA KEV
- Public exploit
- None on Exploit-DB, Metasploit or GitHub
Summary
Unauthenticated PHP Object Injection in Bonbon <= 1.11 versions.
Affected versions
- ThemeREX Bonbon
through 1.11