Skip to content
OpenAdvisories

Vendor

ThemeREX

266 known vulnerabilities.

Products

ThemeREX Addons 9 Puzzles | WP Magazine / Review with Store WordPress Theme + RTL 3 Tipsy 2 ShiftCV 2 Save Life 2 Ozisti 2 Filmax 2 Education Center 2 Preservation 2 Motorix 2 Marcell 2 Muzicon 2 Invetex 2 Asia Garden 2 Booked 2 Law Office 2 RexCoin 2 EmojiNation 2 Stargaze 2 N7 | Golf Club Sports & Events 2 FreightCo 2 Le Truffe 2 Bonbon 2 Coinpress 2 Edge Decor 2 Yacht Rental 2 Splendour 2 Gunslinger 2 Windsor 2 Nuts 2 Gamezone 2 Gamic 2 Printy 2 Avventure 2 Meals & Wheels 2 WineShop 2 Alliance 2 Quirky 2 Legal Stone 2 Orpheus 2
All Critical High Medium Low Exploited only Public exploit

164 results · Clear filters · Feed

  • High 8.1
    CVE-2026-112852

    WordPress Helion theme <= 1.1.12 - PHP Object Injection vulnerability

    Deserialization of Untrusted Data vulnerability in ThemeREX Group Helion helion allows Object Injection.This issue affects Helion: from n/a through 1.1.12.

    ThemeREX Helion
  • High 7.1
    CVE-2026-57742

    WordPress Kids Planet theme <= 2.2.14.2 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeREX Group Kids Planet allows Reflected XSS. This issue affects Kids Planet: from n/a through 2.2.14.2.

    ThemeREX Kids Planet
  • High 8.1
    CVE-2026-62074

    WordPress Ozeum theme <= 1.3.0 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Ozeum <= 1.3.0 versions.

    ThemeREX Ozeum
  • High 7.1
    CVE-2026-94063

    WordPress Education Center theme <= 3.6.12 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeREX Education Center education allows Reflected XSS.This issue affects Education Center: from n/a through 3.6.12.

    ThemeREX Education Center
  • High 7.1
    CVE-2026-97235

    WordPress ThemeREX Addons plugin < 2.45.0 - Cross Site Scripting (XSS) vulnerability

    Unauthenticated Cross Site Scripting (XSS) in ThemeREX Addons < 2.45.0 versions.

    ThemeREX ThemeREX Addons
  • High 7.1
    CVE-2026-57746

    WordPress Booked plugin <= 3.0.0 - Broken Access Control vulnerability

    Subscriber Broken Access Control in Booked <= 3.0.0 versions.

    ThemeREX Booked
  • High 8.1
    CVE-2025-69175

    WordPress Line Agency theme <= 1.3.1 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Line Agency <= 1.3.1 versions.

    ThemeREX Line Agency
  • High 8.1
    CVE-2025-69170

    WordPress Eventicity theme <= 1.5 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Eventicity <= 1.5 versions.

    ThemeREX Eventicity
  • High 8.1
    CVE-2025-69174

    WordPress Etude theme <= 1.6 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Etude <= 1.6 versions.

    ThemeREX Etude
  • High 8.1
    CVE-2025-69166

    WordPress Gunslinger theme <= 1.7 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Gunslinger <= 1.7 versions.

    ThemeREX Gunslinger
  • High 8.1
    CVE-2025-69158

    WordPress Granola theme <= 1.13 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Granola <= 1.13 versions.

    ThemeREX Granola
  • High 8.1
    CVE-2025-69164

    WordPress Skyward theme <= 1.10 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Skyward <= 1.10 versions.

    ThemeREX Skyward
  • High 8.1
    CVE-2025-69157

    WordPress Gamic theme <= 1.15 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Gamic <= 1.15 versions.

    ThemeREX Gamic
  • High 8.1
    CVE-2025-69144

    WordPress Preservation theme <= 1.10 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Preservation <= 1.10 versions.

    ThemeREX Preservation
  • High 8.1
    CVE-2025-69126

    WordPress Fortius theme <= 2.3.0 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Fortius <= 2.3.0 versions.

    ThemeREX Fortius
  • High 8.1
    CVE-2025-69123

    WordPress Snow Club theme <= 1.1 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Snow Club <= 1.1 versions.

    ThemeREX Snow Club
  • High 8.1
    CVE-2025-69120

    WordPress Dazzle theme <= 1.0.0 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Dazzle <= 1.0.0 versions.

    ThemeREX Dazzle
  • High 8.1
    CVE-2025-69115

    WordPress LuxMed | Medicine & Healthcare Doctor WordPress Theme theme <= 1.2.2 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in LuxMed | Medicine & Healthcare Doctor WordPress Theme <= 1.2.2 versions.

    ThemeREX LuxMed | Medicine & Healthcare Doctor WordPress Theme Web / CMS
  • High 8.1
    CVE-2025-69106

    WordPress Imba theme <= 1.5.0 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Imba <= 1.5.0 versions.

    ThemeREX Imba
  • High 8.1
    CVE-2026-22338

    WordPress EcoBlue theme <= 1.15 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in EcoBlue <= 1.15 versions.

    ThemeREX EcoBlue
  • High 8.1
    CVE-2026-22331

    WordPress AutoParts theme <= 1.5.8 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in AutoParts <= 1.5.8 versions.

    ThemeREX AutoParts
  • High 8.1
    CVE-2025-69173

    WordPress Tipsy theme <= 1.1 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Tipsy <= 1.1 versions.

    ThemeREX Tipsy
  • High 8.1
    CVE-2025-69172

    WordPress Resurs theme <= 1.3 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Resurs <= 1.3 versions.

    ThemeREX Resurs
  • High 8.1
    CVE-2025-69171

    WordPress Orpheus theme <= 1.3 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Orpheus <= 1.3 versions.

    ThemeREX Orpheus
  • High 8.1
    CVE-2025-69161

    WordPress Snowy theme <= 1.13 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Snowy <= 1.13 versions.

    ThemeREX Snowy
  • High 8.1
    CVE-2025-69148

    WordPress Quirky theme <= 1.23 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Quirky <= 1.23 versions.

    ThemeREX Quirky
  • High 8.1
    CVE-2025-69145

    WordPress Gat theme <= 1.16 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Gat <= 1.16 versions.

    ThemeREX Gat
  • High 8.1
    CVE-2025-69117

    WordPress Ingenioso theme <= 1.14.0 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Ingenioso <= 1.14.0 versions.

    ThemeREX Ingenioso
  • High 8.1
    CVE-2025-69110

    WordPress AirSupply theme <= 2.0.0 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in AirSupply <= 2.0.0 versions.

    ThemeREX AirSupply
  • High 8.1
    CVE-2025-58954

    WordPress HomeRoofer theme <= 2.11.0 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in HomeRoofer <= 2.11.0 versions.

    ThemeREX HomeRoofer
  • High 8.1
    CVE-2025-58953

    WordPress Joly theme <= 1.22.0 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Joly <= 1.22.0 versions.

    ThemeREX Joly
  • High 8.1
    CVE-2025-58952

    WordPress Neuronet theme < 1.14.0 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Neuronet < 1.14.0 versions.

    ThemeREX Neuronet
  • High 8.1
    CVE-2025-69176

    WordPress ITactics theme <= 1.0 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in ITactics <= 1.0 versions.

    ThemeREX ITactics
  • High 8.1
    CVE-2025-69168

    WordPress Spike theme <= 1.2 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Spike <= 1.2 versions.

    ThemeREX Spike
  • High 8.1
    CVE-2025-69165

    WordPress Choreo theme <= 1.6 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Choreo <= 1.6 versions.

    ThemeREX Choreo
  • High 8.1
    CVE-2025-69167

    WordPress Eros theme <= 1.3 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Eros <= 1.3 versions.

    ThemeREX Eros
  • High 8.1
    CVE-2025-69163

    WordPress WineShop theme <= 3.17 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in WineShop <= 3.17 versions.

    ThemeREX WineShop
  • High 8.1
    CVE-2025-69162

    WordPress Grecko theme <= 5.17 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Grecko <= 5.17 versions.

    ThemeREX Grecko
  • High 8.1
    CVE-2025-69160

    WordPress Gita theme <= 1.11 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Gita <= 1.11 versions.

    ThemeREX Gita
  • High 8.1
    CVE-2025-69159

    WordPress Printo theme <= 1.11 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Printo <= 1.11 versions.

    ThemeREX Printo