CVE-2026-104747

Unauthenticated PHP Object Injection in Haaken <= 1.5 versions.

Credits

Denver Jackson | Patchstack Bug Bounty Program

References

https://patchstack.com/database/wordpress/theme/haaken/vulnerability/wordpress-haaken-theme-1-5-php-object-injection-vulnerability?_s_id=cve