Description
Unauthenticated PHP Object Injection in Haaken <= 1.5 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Edge-Themes | Haaken | ≤ 1.5 | — |
High · 8.1
CVE-2026-104747
EUVD-2026-93080GHSA-wm8r-hhm6-f67f
WordPress Haaken theme <= 1.5 - PHP Object Injection vulnerability
Published Oct 6, 2026 · Updated Oct 6, 2026 · Assigned by Patchstack