Theme-Rex CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

CRITICAL Theme-Rex CVE published 2026-08-24

CVE-2026-66650

Unauthenticated PHP Object Injection vulnerability in FreightCo theme versions <= 1.1.15. This critical vulnerability allows for potential code execution, data breaches, and system compromise. Defenders of systems using FreightCo theme versions <= 1.1.15 should verify and patch vulnerable systems to prevent potential impacts. The CVE record and NIST NVD detail page confirm vulnerability existence, providi [truncated]