Themerex Windsor
2 CVEs affecting Themerex Windsor. Latest disclosed: 2026-10-10. Critical: 1, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-66563 | Critical | 9.8 | 2026-10-10 | Unauthenticated PHP Object Injection in Windsor <= 2.10 versions. |
CVE-2026-28081 | High | 8.1 | 2026-03-05 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Windsor windsor allows PHP Lo… |