Description
Unauthenticated PHP Object Injection in Yacht Rental <= 2.6 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| ThemeREX | Yacht Rental | ≤ 2.6 | — |
Critical · 9.8
CVE-2026-62054
EUVD-2026-96478GHSA-w74p-39xg-c686
WordPress Yacht Rental theme <= 2.6 - PHP Object Injection vulnerability
Published Oct 10, 2026 · Updated Oct 11, 2026 · Assigned by Patchstack