CVE-2026-62050 ThemeREX CVE debrief

Who should care

System administrators and security teams responsible for managing and securing WordPress installations using the Splendour theme should be aware of this vulnerability and take immediate action to verify and patch affected systems.

Why it matters

CVE-2026-62050 is a critical vulnerability in the Splendour theme that requires immediate attention from system administrators and security teams to prevent potential exploitation and severe consequences.

• Potential for severe exploitation if left unpatched
• Need for immediate verification and patching of affected systems
• Possible impact on system confidentiality, integrity, and availability

Technical summary

The Splendour theme, version up to 1.23, is vulnerable to unauthenticated PHP object injection. This vulnerability has a CVSS score of 9.8 and is considered critical.

Defensive priority

High priority should be given to verifying and patching affected systems, as the vulnerability has a high CVSS score of 9.8.

Recommended defensive actions

• Verify and patch affected systems immediately
• Review system logs for potential exploitation attempts
• Implement additional security measures to prevent PHP object injection attacks

Evidence notes

The vulnerability was reported by Patchstack and is tracked under CVE-2026-62050. The NVD entry is currently being processed.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.