CVE-2026-104747

Edge-Themes Haaken

Published 6 Oct 2026 · updated 6 Oct 2026 · Received

8.1 High · CVSS 3.1, patchstack.com

Description

Unauthenticated PHP Object Injection in Haaken <= 1.5 versions.

References

patchstack.com/database/wordpress/theme/haaken/vulnerability/wordpress-haaken-theme-1-5-php-object-injection-vulnerability?_s_id=cve