Skip to content
OpenAdvisories

Vendor

ThemeREX

266 known vulnerabilities.

Products

ThemeREX Addons 9 Puzzles | WP Magazine / Review with Store WordPress Theme + RTL 3 Tipsy 2 ShiftCV 2 Save Life 2 Ozisti 2 Filmax 2 Education Center 2 Preservation 2 Motorix 2 Marcell 2 Muzicon 2 Invetex 2 Asia Garden 2 Booked 2 Law Office 2 RexCoin 2 EmojiNation 2 Stargaze 2 N7 | Golf Club Sports & Events 2 FreightCo 2 Le Truffe 2 Bonbon 2 Coinpress 2 Edge Decor 2 Yacht Rental 2 Splendour 2 Gunslinger 2 Windsor 2 Nuts 2 Gamezone 2 Gamic 2 Printy 2 Avventure 2 Meals & Wheels 2 WineShop 2 Alliance 2 Quirky 2 Legal Stone 2 Orpheus 2
All Critical High Medium Low Exploited only Public exploit

95 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-119526

    WordPress Royal Event theme <= 2.0 - PHP Object Injection vulnerability

    Deserialization of Untrusted Data vulnerability in ThemeREX Royal Event allows Object Injection. This issue affects Royal Event: from n/a through 2.0.

    ThemeREX Royal Event
  • Critical 9.8
    CVE-2026-62018

    WordPress Gunslinger theme <= 1.11 - PHP Object Injection vulnerability

    Unauthenticated PHP Object Injection in Gunslinger <= 1.11 versions.

    ThemeREX Gunslinger
  • Critical 9.8
    CVE-2026-62017

    WordPress Good Homes theme <= 1.3.13 - PHP Object Injection vulnerability

    Unauthenticated PHP Object Injection in Good Homes <= 1.3.13 versions.

    ThemeREX Good Homes
  • Critical 9.8
    CVE-2026-62016

    WordPress Gamic theme <= 1.19 - PHP Object Injection vulnerability

    Unauthenticated PHP Object Injection in Gamic <= 1.19 versions.

    ThemeREX Gamic
  • Critical 9.8
    CVE-2026-62015

    WordPress Gamezone theme <= 1.1.11 - PHP Object Injection vulnerability

    Unauthenticated PHP Object Injection in Gamezone <= 1.1.11 versions.

    ThemeREX Gamezone
  • Critical 9.8
    CVE-2026-62014

    WordPress EmojiNation theme <= 1.0.12 - PHP Object Injection vulnerability

    Unauthenticated PHP Object Injection in EmojiNation <= 1.0.12 versions.

    ThemeREX EmojiNation
  • Critical 9.8
    CVE-2026-62013

    WordPress Edge Decor theme <= 2.9 - PHP Object Injection vulnerability

    Unauthenticated PHP Object Injection in Edge Decor <= 2.9 versions.

    ThemeREX Edge Decor Browsers
  • Critical 9.8
    CVE-2026-62012

    WordPress Coinpress theme <= 1.0.15 - PHP Object Injection vulnerability

    Unauthenticated PHP Object Injection in Coinpress <= 1.0.15 versions.

    ThemeREX Coinpress
  • Critical 9.8
    CVE-2026-62010

    WordPress Avventure theme <= 1.1.12 - PHP Object Injection vulnerability

    Unauthenticated PHP Object Injection in Avventure <= 1.1.12 versions.

    ThemeREX Avventure
  • Critical 9.8
    CVE-2026-62011

    WordPress Bonbon theme <= 1.11 - PHP Object Injection vulnerability

    Unauthenticated PHP Object Injection in Bonbon <= 1.11 versions.

    ThemeREX Bonbon
  • Critical 9.8
    CVE-2026-62009

    WordPress Filmax theme <= 1.1.11 - PHP Object Injection vulnerability

    Unauthenticated PHP Object Injection in Filmax <= 1.1.11 versions.

    ThemeREX Filmax
  • Critical 9.8
    CVE-2026-62008

    WordPress Orpheus theme <= 1.8 - PHP Object Injection vulnerability

    Unauthenticated PHP Object Injection in Orpheus <= 1.8 versions.

    ThemeREX Orpheus
  • Critical 9.8
    CVE-2026-62006

    WordPress Nuts theme <= 1.12 - PHP Object Injection vulnerability

    Unauthenticated PHP Object Injection in Nuts <= 1.12 versions.

    ThemeREX Nuts
  • Critical 9.8
    CVE-2026-62005

    WordPress Muzicon theme <= 1.15 - PHP Object Injection vulnerability

    Unauthenticated PHP Object Injection in Muzicon <= 1.15 versions.

    ThemeREX Muzicon
  • Critical 9.8
    CVE-2026-62004

    WordPress Motorix theme <= 1.11 - PHP Object Injection vulnerability

    Unauthenticated PHP Object Injection in Motorix <= 1.11 versions.

    ThemeREX Motorix
  • Critical 9.8
    CVE-2026-62003

    WordPress Mission theme <= 1.22 - PHP Object Injection vulnerability

    Unauthenticated PHP Object Injection in Mission <= 1.22 versions.

    ThemeREX Mission
  • Critical 9.8
    CVE-2026-62002

    WordPress Meals & Wheels theme <= 1.1.13 - PHP Object Injection vulnerability

    Unauthenticated PHP Object Injection in Meals & Wheels <= 1.1.13 versions.

    ThemeREX Meals & Wheels
  • Critical 9.8
    CVE-2026-62001

    WordPress Marcell theme <= 1.2.14 - PHP Object Injection vulnerability

    Unauthenticated PHP Object Injection in Marcell <= 1.2.14 versions.

    ThemeREX Marcell
  • Critical 9.8
    CVE-2026-61998

    WordPress Le Truffe theme <= 1.1.7 - PHP Object Injection vulnerability

    Unauthenticated PHP Object Injection in Le Truffe <= 1.1.7 versions.

    ThemeREX Le Truffe
  • Critical 9.8
    CVE-2026-61997

    WordPress Legal Stone theme <= 1.2.11 - PHP Object Injection vulnerability

    Unauthenticated PHP Object Injection in Legal Stone <= 1.2.11 versions.

    ThemeREX Legal Stone
  • Critical 9.8
    CVE-2026-54860

    WordPress Ozisti theme <= 1.1.10 - PHP Object Injection vulnerability

    Unauthenticated PHP Object Injection in Ozisti <= 1.1.10 versions.

    ThemeREX Ozisti
  • Critical 9.8
    CVE-2026-54859

    WordPress Preservation theme <= 1.15 - PHP Object Injection vulnerability

    Unauthenticated PHP Object Injection in Preservation <= 1.15 versions.

    ThemeREX Preservation
  • Critical 9.8
    CVE-2026-54858

    WordPress Printy theme <= 1.13.0 - PHP Object Injection vulnerability

    Unauthenticated PHP Object Injection in Printy <= 1.13.0 versions.

    ThemeREX Printy
  • Critical 9.8
    CVE-2026-54856

    WordPress RexCoin theme <= 1.2.6 - PHP Object Injection vulnerability

    Unauthenticated PHP Object Injection in RexCoin <= 1.2.6 versions.

    ThemeREX RexCoin
  • Critical 9.8
    CVE-2026-54857

    WordPress Quirky theme <= 1.23 - PHP Object Injection vulnerability

    Unauthenticated PHP Object Injection in Quirky <= 1.23 versions.

    ThemeREX Quirky
  • Critical 9.8
    CVE-2026-112847

    WordPress ZenSoul theme <= 1.13 - PHP Object Injection vulnerability

    Deserialization of Untrusted Data vulnerability in ThemeREX ZenSoul zensoul allows Object Injection.This issue affects ZenSoul: from n/a through 1.13.

    ThemeREX ZenSoul
  • Critical 9.8
    CVE-2026-112851

    WordPress HotLock theme <= 1.3.9 - PHP Object Injection vulnerability

    Deserialization of Untrusted Data vulnerability in ThemeREX Group HotLock hotlock allows Object Injection.This issue affects HotLock: from n/a through 1.3.9.

    ThemeREX HotLock
  • Critical 9.8
    CVE-2026-112846

    WordPress Save Life theme <= 1.2.14 - PHP Object Injection vulnerability

    Deserialization of Untrusted Data vulnerability in ThemeREX Group Save Life save-life allows Object Injection.This issue affects Save Life: from n/a through 1.2.14.

    ThemeREX Save Life
  • Critical 9.8
    CVE-2026-112859

    WordPress Little Birdies theme <= 1.3.16 - PHP Object Injection vulnerability

    Deserialization of Untrusted Data vulnerability in ThemeREX Group Little Birdies little-birdies allows Object Injection.This issue affects Little Birdies: from n/a through 1.3.16.

    ThemeREX Little Birdies
  • Critical 9.8
    CVE-2026-112856

    WordPress Vagabonds theme <= 1.3.10 - PHP Object Injection vulnerability

    Deserialization of Untrusted Data vulnerability in ThemeREX Group Vagabonds vagabonds allows Object Injection.This issue affects Vagabonds: from n/a through 1.3.10.

    ThemeREX Vagabonds
  • Critical 9.8
    CVE-2026-81797

    WordPress Buzz Stone | Magazine & Viral Blog WordPress Theme theme <= 1.0.2 - PHP Object Injection vulnerability

    Unauthenticated PHP Object Injection in Buzz Stone | Magazine & Viral Blog WordPress Theme <= 1.0.2 versions.

    ThemeREX Buzz Stone | Magazine & Viral Blog WordPress Theme Web / CMS
  • Critical 9.8
    CVE-2026-78535

    WordPress Photolia theme <= 1.0.3 - PHP Object Injection vulnerability

    Unauthenticated PHP Object Injection in Photolia <= 1.0.3 versions.

    ThemeREX Photolia
  • Critical 9.8
    CVE-2026-78531

    WordPress Jacqueline theme <= 2.22 - PHP Object Injection vulnerability

    Unauthenticated PHP Object Injection in Jacqueline <= 2.22 versions.

    ThemeREX Jacqueline
  • Critical 9.8
    CVE-2026-78529

    WordPress Alliance theme <= 3.11 - PHP Object Injection vulnerability

    Unauthenticated PHP Object Injection in Alliance <= 3.11 versions.

    ThemeREX Alliance
  • Critical 9.8
    CVE-2026-66564

    WordPress ShiftCV theme <= 3.0.14 - PHP Object Injection vulnerability

    Unauthenticated PHP Object Injection in ShiftCV <= 3.0.14 versions.

    ThemeREX ShiftCV
  • Critical 9.8
    CVE-2026-66563

    WordPress Windsor theme <= 2.10 - PHP Object Injection vulnerability

    Unauthenticated PHP Object Injection in Windsor <= 2.10 versions.

    ThemeREX Windsor
  • Critical 9.8
    CVE-2026-66483

    WordPress Education Center theme <= 3.6.12 - PHP Object Injection vulnerability

    Unauthenticated PHP Object Injection in Education Center <= 3.6.12 versions.

    ThemeREX Education Center
  • Critical 9.8
    CVE-2026-62125

    WordPress Asia Garden theme <= 1.3.1 - PHP Object Injection vulnerability

    Unauthenticated PHP Object Injection in Asia Garden <= 1.3.1 versions.

    ThemeREX Asia Garden
  • Critical 9.8
    CVE-2026-62123

    WordPress Invetex theme <= 2.18 - PHP Object Injection vulnerability

    Unauthenticated PHP Object Injection in Invetex <= 2.18 versions.

    ThemeREX Invetex
  • Critical 9.8
    CVE-2026-62124

    WordPress N7 | Golf Club Sports & Events theme <= 2.21 - PHP Object Injection vulnerability

    Unauthenticated PHP Object Injection in N7 | Golf Club Sports & Events <= 2.21 versions.

    ThemeREX N7 | Golf Club Sports & Events