helion vulnerabilities

CVEs whose affected-version data names the helion package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-112852High· 8.1

yesterday

WordPress Helion theme <= 1.1.12 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in ThemeREX Group Helion helion allows Object Injection.This issue affects Helion: from n/a through 1.1.12.

▾ TwilightThemeREX Group · helionEPSS 0.44%via CVEORG