Skip to content
OpenAdvisories

Vendor

ThemeREX

266 known vulnerabilities.

Products

ThemeREX Addons 9 Puzzles | WP Magazine / Review with Store WordPress Theme + RTL 3 Tipsy 2 ShiftCV 2 Save Life 2 Ozisti 2 Filmax 2 Education Center 2 Preservation 2 Motorix 2 Marcell 2 Muzicon 2 Invetex 2 Asia Garden 2 Booked 2 Law Office 2 RexCoin 2 EmojiNation 2 Stargaze 2 N7 | Golf Club Sports & Events 2 FreightCo 2 Le Truffe 2 Bonbon 2 Coinpress 2 Edge Decor 2 Yacht Rental 2 Splendour 2 Gunslinger 2 Windsor 2 Nuts 2 Gamezone 2 Gamic 2 Printy 2 Avventure 2 Meals & Wheels 2 WineShop 2 Alliance 2 Quirky 2 Legal Stone 2 Orpheus 2
All Critical High Medium Low Exploited only Public exploit

164 results · Clear filters · Feed

  • High 8.1
    CVE-2025-69150

    WordPress Medeus theme <= 1.14 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Medeus <= 1.14 versions.

    ThemeREX Medeus
  • High 8.1
    CVE-2025-69149

    WordPress Top Dog theme <= 1.0.5 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Top Dog <= 1.0.5 versions.

    ThemeREX Top Dog
  • High 8.1
    CVE-2025-69146

    WordPress Dom theme <= 1.24 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Dom <= 1.24 versions.

    ThemeREX Dom
  • High 8.1
    CVE-2025-69147

    WordPress Putter theme <= 1.17 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Putter <= 1.17 versions.

    ThemeREX Putter
  • High 8.1
    CVE-2025-69143

    WordPress Mission theme <= 1.22 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Mission <= 1.22 versions.

    ThemeREX Mission
  • High 8.1
    CVE-2025-69142

    WordPress Abelle theme <= 1.22 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Abelle <= 1.22 versions.

    ThemeREX Abelle
  • High 8.1
    CVE-2025-69141

    WordPress Kelly Young theme <= 1.1.0 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Kelly Young <= 1.1.0 versions.

    ThemeREX Kelly Young
  • High 8.1
    CVE-2025-69125

    WordPress Food Drop theme <= 1.3 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Food Drop <= 1.3 versions.

    ThemeREX Food Drop
  • High 8.1
    CVE-2025-69124

    WordPress Especio theme <= 1.0 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Especio <= 1.0 versions.

    ThemeREX Especio
  • High 8.1
    CVE-2025-69121

    WordPress Deliciosa theme <= 1.10.0 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Deliciosa <= 1.10.0 versions.

    ThemeREX Deliciosa
  • High 8.1
    CVE-2025-69119

    WordPress Corbesier theme <= 1.15.0 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Corbesier <= 1.15.0 versions.

    ThemeREX Corbesier
  • High 8.1
    CVE-2025-69116

    WordPress Iona theme <= 1.0.8 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Iona <= 1.0.8 versions.

    ThemeREX Iona
  • High 8.1
    CVE-2025-69118

    WordPress CopyPress theme <= 1.4.5 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in CopyPress <= 1.4.5 versions.

    ThemeREX CopyPress
  • High 8.1
    CVE-2025-69114

    WordPress MaxiNet theme <= 1.2.10 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in MaxiNet <= 1.2.10 versions.

    ThemeREX MaxiNet
  • High 8.1
    CVE-2025-69113

    WordPress Nexio theme <= 1.10.0 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Nexio <= 1.10.0 versions.

    ThemeREX Nexio
  • High 8.1
    CVE-2025-69112

    WordPress Planty theme <= 1.14.0 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Planty <= 1.14.0 versions.

    ThemeREX Planty
  • High 8.1
    CVE-2025-69109

    WordPress Raider Spirit theme <= 1.1.2 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Raider Spirit <= 1.1.2 versions.

    ThemeREX Raider Spirit
  • High 8.1
    CVE-2025-69107

    WordPress Rosaleen theme <= 2.8 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Rosaleen <= 2.8 versions.

    ThemeREX Rosaleen
  • High 8.1
    CVE-2025-69105

    WordPress Modernee theme <= 1.6.0 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Modernee <= 1.6.0 versions.

    ThemeREX Modernee
  • High 8.1
    CVE-2025-60085

    WordPress Learnify theme <= 1.15.0 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Learnify <= 1.15.0 versions.

    ThemeREX Learnify
  • High 8.1
    CVE-2025-58924

    WordPress Geya theme <= 1.15 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Geya <= 1.15 versions.

    ThemeREX Geya
  • High 8.1
    CVE-2026-22504

    WordPress ProLingua theme <= 1.1.12 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX ProLingua prolingua allows PHP Local File Inclusion.This issue affects ProLingua: from n/a through <= 1.1.12.

    ThemeREX ProLingua
  • High 8.1
    CVE-2026-22503

    WordPress Nelson theme <= 1.2.0 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Nelson nelson allows PHP Local File Inclusion.This issue affects Nelson: from n/a through <= 1.2.0.

    ThemeREX Nelson
  • High 8.1
    CVE-2026-22494

    WordPress Good Homes theme <= 1.3.13 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Good Homes good-homes allows PHP Local File Inclusion.This issue affects Good Homes: from n/a through <= 1.3.13.

    ThemeREX Good Homes
  • High 8.1
    CVE-2026-22324

    WordPress Melania theme <= 2.5.0 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Melania allows PHP Local File Inclusion.This issue affects Melania: from n/a through 2.5.0.

    ThemeREX Melania
  • High 8.1
    CVE-2026-28128

    WordPress Verse theme <= 1.7.0 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Verse verse allows PHP Local File Inclusion.This issue affects Verse: from n/a through <= 1.7.0.

    ThemeREX Verse
  • High 8.1
    CVE-2026-28120

    WordPress Dr.Patterson theme <= 1.3.2 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Dr.Patterson dr-patterson allows PHP Local File Inclusion.This issue affects Dr.Patterson: from n/a through <= 1.3.2.

    ThemeREX Dr.Patterson
  • High 8.1
    CVE-2026-28107

    WordPress Muzicon theme <= 1.9.0 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Muzicon muzicon allows PHP Local File Inclusion.This issue affects Muzicon: from n/a through <= 1.9.0.

    ThemeREX Muzicon
  • High 8.1
    CVE-2026-28097

    WordPress Artrium theme <= 1.0.14 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Artrium artrium allows PHP Local File Inclusion.This issue affects Artrium: from n/a through <= 1.0.14.

    ThemeREX Artrium
  • High 8.1
    CVE-2026-28098

    WordPress Save Life theme <= 1.2.13 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Save Life save-life allows PHP Local File Inclusion.This issue affects Save Life: from n/a through <= 1.2.13.

    ThemeREX Save Life
  • High 8.1
    CVE-2026-28092

    WordPress Sounder theme <= 1.3.11 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Sounder sounder allows PHP Local File Inclusion.This issue affects Sounder: from n/a through <= 1.3.11.

    ThemeREX Sounder
  • High 8.1
    CVE-2026-28094

    WordPress RexCoin theme <= 1.2.6 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX RexCoin rexcoin allows PHP Local File Inclusion.This issue affects RexCoin: from n/a through <= 1.2.6.

    ThemeREX RexCoin
  • High 8.1
    CVE-2026-28095

    WordPress Marcell theme <= 1.2.14 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Marcell marcell allows PHP Local File Inclusion.This issue affects Marcell: from n/a through <= 1.2.14.

    ThemeREX Marcell
  • High 8.1
    CVE-2026-28096

    WordPress WealthCo theme <= 2.18 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX WealthCo wealthco allows PHP Local File Inclusion.This issue affects WealthCo: from n/a through <= 2.18.

    ThemeREX WealthCo
  • High 8.1
    CVE-2026-28093

    WordPress Ozisti theme <= 1.1.10 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Ozisti ozisti allows PHP Local File Inclusion.This issue affects Ozisti: from n/a through <= 1.1.10.

    ThemeREX Ozisti
  • High 8.1
    CVE-2026-28091

    WordPress Coleo theme <= 1.1.7 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Coleo coleo allows PHP Local File Inclusion.This issue affects Coleo: from n/a through <= 1.1.7.

    ThemeREX Coleo
  • High 8.1
    CVE-2026-28087

    WordPress Filmax theme <= 1.1.11 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Filmax filmax allows PHP Local File Inclusion.This issue affects Filmax: from n/a through <= 1.1.11.

    ThemeREX Filmax
  • High 8.1
    CVE-2026-28089

    WordPress Daiquiri theme <= 1.2.4 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Daiquiri daiquiri allows PHP Local File Inclusion.This issue affects Daiquiri: from n/a through <= 1.2.4.

    ThemeREX Daiquiri
  • High 8.1
    CVE-2026-28088

    WordPress Aqualots theme <= 1.1.6 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Aqualots aqualots allows PHP Local File Inclusion.This issue affects Aqualots: from n/a through <= 1.1.6.

    ThemeREX Aqualots
  • High 8.1
    CVE-2026-28090

    WordPress Gamezone theme <= 1.1.11 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Gamezone gamezone allows PHP Local File Inclusion.This issue affects Gamezone: from n/a through <= 1.1.11.

    ThemeREX Gamezone