ThemeREX Windsor

• CVE-2026-66563 Critical 9.8 WordPress Windsor theme <= 2.10 - PHP Object Injection vulnerability 0.3%
• CVE-2026-28081 High 8.1 WordPress Windsor theme <= 2.5.0 - Local File Inclusion vulnerability 0.5%