CVE-2026-112852

HIGH NVD

CVSS Score 8.1

Severity HIGH

Published Oct 23, 2026

Vendor unknown

Description

Deserialization of Untrusted Data vulnerability in ThemeREX Group Helion helion allows Object Injection.This issue affects Helion: from n/a through 1.1.12.

References

https://patchstack.com/database/wordpress/theme/helion/vulnerability/wordpress-helion-theme-1-1-12-php-object-injection-vulnerability?_s_id=cve