Description
Unauthenticated PHP Object Injection in Edge Decor <= 2.9 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| ThemeREX | Edge Decor | ≤ 2.9 | — |
Critical · 9.8
CVE-2026-62013
EUVD-2026-112976GHSA-r7w3-h9fp-gf6j
WordPress Edge Decor theme <= 2.9 - PHP Object Injection vulnerability
Published Oct 29, 2026 · Updated Oct 29, 2026 · Assigned by Patchstack