Filtered by vendor Themerex Subscriptions
Filtered by product Bonbon Subscriptions
Total 1 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2026-28030 2 Themerex, Wordpress 2 Bonbon, Wordpress 2026-03-06 8.1 High
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Bonbon bonbon allows PHP Local File Inclusion.This issue affects Bonbon: from n/a through <= 1.6.