CVE-2026-62105

Unauthenticated PHP Object Injection in ThemeREX Addons < 2.45.0 versions.

Published Sep 11, 2026
CVSS 9.8 critical
0.6% chance of exploitation in the next 30 days (EPSS)

Affected software

ThemeREX Addons

CVE-2026-62105 at the National Vulnerability Database