ThemeREX Bonbon

• CVE-2026-62011 Critical 9.8 WordPress Bonbon theme <= 1.11 - PHP Object Injection vulnerability 0.4%
• CVE-2026-28030 High 8.1 WordPress Bonbon theme <= 1.6 - Local File Inclusion vulnerability 0.5%