CRITICAL 9.8 CVE-2026-112856 Published 23 Oct 2026

ThemeREX Vagabonds WordPress Theme Object Injection Vulnerability

Worried this affects your website?

Get Emergency Help help@myserverhacked.com

A deserialization of untrusted data vulnerability has been disclosed in the ThemeREX Group Vagabonds WordPress theme, allowing object injection.

The issue affects Vagabonds versions from n/a through 1.3.10.

Reference: CVE-2026-112856 on NVD

← Back to Security News