Description
Unauthenticated PHP Object Injection in FreightCo <= 1.1.15 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Theme-Rex | FreightCo | ≤ 1.1.15 | — |
Critical · 9.8
CVE-2026-66650
EUVD-2026-64809GHSA-vxvv-qcm6-46hj
WordPress FreightCo theme <= 1.1.15 - PHP Object Injection vulnerability
Published Aug 24, 2026 · Updated Aug 24, 2026 · Assigned by Patchstack