Description
Unauthenticated PHP Object Injection in Behold <= 1.5 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Edge-Themes | Behold | ≤ 1.5 | — |
High · 8.1
CVE-2026-40760
EUVD-2026-37492GHSA-29m3-j3cr-hcg3
WordPress Behold theme <= 1.5 - PHP Object Injection vulnerability
Published Jun 16, 2026 · Updated Jun 17, 2026 · Assigned by Patchstack