Themerex Bonbon vulnerabilities

• themerex bonbon WordPress Bonbon theme <= 1.11 - PHP Object Injection vulnerability CVE-2026-62011 9.8 CriticalOctober 29, 2026
• themerex bonbon WordPress Bonbon theme <= 1.6 - Local File Inclusion vulnerability CVE-2026-28030 8.1 HighMarch 5, 2026