BO
Product
Bonbon
by ThemeREX · last CVE Oct 29, 2026
2
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 1High 1Medium 0Low 0
Watch

Add Bonbon to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-62011
New
9.8–Oct 29
WordPress Bonbon theme <= 1.11 - PHP Object Injection vulnerability
Affected: through 1.11
CVE-2026-28030
8.1
0%
Mar 5
WordPress Bonbon theme <= 1.6 - Local File Inclusion vulnerability
Affected: through 1.6
Showing 2