CVE-2026-62105

The vulnerability allows unauthenticated PHP Object Injection in ThemeREX Addons versions prior to 2.45.0, potentially enabling attackers to execute arbitrary code on affected systems. This critical flaw poses a significant risk to any web applications utilizing these addons, particularly those that handle sensitive data or are publicly accessible. Organizations using ThemeREX Addons should prioritize immediate updates to mitigate the risk of exploitation.