Themerex Marcell
2 CVEs affecting Themerex Marcell. Latest disclosed: 2026-10-29. Critical: 1, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-62001 | Critical | 9.8 | 2026-10-29 | Unauthenticated PHP Object Injection in Marcell <= 1.2.14 versions. |
CVE-2026-28095 | High | 8.1 | 2026-03-05 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Marcell marcell allows PHP Lo… |