Known vulnerabilities in ThemeREX Meals & Wheels
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-62002 | Unauthenticated PHP Object Injection in Meals & Wheels <= 1.1.13 versions | 9.8 Critical | Oct 29, 2026 |
| CVE-2026-27992 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in… | 8.1 High | Mar 5, 2026 |