Vulnerabilities

Unauthenticated PHP Object Injection in Bonbon <= 1.11 versions.

Unauthenticated PHP Object Injection in Bonbon <= 1.11 versions.

Read at NIST National Vulnerability Database (CVE API 2.0)

Vendor

ThemeREX

Product

Bonbon

CVSS v3.1

9.8 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness

CWE-502

NVD status

Deferred

• NIST National Vulnerability Database (CVE API 2.0) (nvd.nist.gov)
• CVE-2026-62011 on this site · NVD · CVE.org · Vulnpedia

Other items that share a CVE or were clustered with this one.

1. 24
   CVE NVD 2d ago

   Unauthenticated PHP Object Injection in Gunslinger <= 1.11 versions.

   CVSS 9.8 CVE-2026-62018 ThemeREX
2. 24
   CVE NVD 2d ago

   Unauthenticated PHP Object Injection in Gamic <= 1.19 versions.

   CVSS 9.8 CVE-2026-62016 ThemeREX
3. 24
   CVE NVD 2d ago

   Unauthenticated PHP Object Injection in Gamezone <= 1.1.11 versions.

   CVSS 9.8 CVE-2026-62015 ThemeREX
4. 24
   CVE NVD 2d ago

   Unauthenticated PHP Object Injection in Avventure <= 1.1.12 versions.

   CVSS 9.8 CVE-2026-62010 ThemeREX
5. 24
   CVE NVD 2d ago

   Unauthenticated PHP Object Injection in Filmax <= 1.1.11 versions.

   CVSS 9.8 CVE-2026-62009 ThemeREX
6. 24
   CVE NVD 2d ago

   Unauthenticated PHP Object Injection in Orpheus <= 1.8 versions.

   CVSS 9.8 CVE-2026-62008 ThemeREX
7. 24
   CVE NVD 2d ago

   Unauthenticated PHP Object Injection in Nuts <= 1.12 versions.

   CVSS 9.8 CVE-2026-62006 ThemeREX
8. 24
   CVE NVD 2d ago

   Unauthenticated PHP Object Injection in Muzicon <= 1.15 versions.

   CVSS 9.8 CVE-2026-62005 ThemeREX
9. 24
   CVE NVD 2d ago

   Unauthenticated PHP Object Injection in Motorix <= 1.11 versions.

   CVSS 9.8 CVE-2026-62004 ThemeREX
10. 24
    CVE NVD 2d ago

    Unauthenticated PHP Object Injection in Mission <= 1.22 versions.

    CVSS 9.8 CVE-2026-62003 ThemeREX
11. 24
    CVE NVD 2d ago

    Unauthenticated PHP Object Injection in Ozisti <= 1.1.10 versions.

    CVSS 9.8 CVE-2026-54860 ThemeREX
12. 24
    CVE NVD 2d ago

    Unauthenticated PHP Object Injection in Preservation <= 1.15 versions.

    CVSS 9.8 CVE-2026-54859 ThemeREX
13. 24
    CVE NVD 2d ago

    Unauthenticated PHP Object Injection in Quirky <= 1.23 versions.

    CVSS 9.8 CVE-2026-54857 ThemeREX