Skip to content
OpenAdvisories

Vendor

ThemeREX

266 known vulnerabilities.

Products

ThemeREX Addons 9 Puzzles | WP Magazine / Review with Store WordPress Theme + RTL 3 Tipsy 2 ShiftCV 2 Save Life 2 Ozisti 2 Filmax 2 Education Center 2 Preservation 2 Motorix 2 Marcell 2 Muzicon 2 Invetex 2 Asia Garden 2 Booked 2 Law Office 2 RexCoin 2 EmojiNation 2 Stargaze 2 N7 | Golf Club Sports & Events 2 FreightCo 2 Le Truffe 2 Bonbon 2 Coinpress 2 Edge Decor 2 Yacht Rental 2 Splendour 2 Gunslinger 2 Windsor 2 Nuts 2 Gamezone 2 Gamic 2 Printy 2 Avventure 2 Meals & Wheels 2 WineShop 2 Alliance 2 Quirky 2 Legal Stone 2 Orpheus 2
All Critical High Medium Low Exploited only Public exploit

266 results · Feed

  • High 8.1
    CVE-2025-69170

    WordPress Eventicity theme <= 1.5 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Eventicity <= 1.5 versions.

    ThemeREX Eventicity
  • High 8.1
    CVE-2025-69174

    WordPress Etude theme <= 1.6 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Etude <= 1.6 versions.

    ThemeREX Etude
  • High 8.1
    CVE-2025-69166

    WordPress Gunslinger theme <= 1.7 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Gunslinger <= 1.7 versions.

    ThemeREX Gunslinger
  • High 8.1
    CVE-2025-69158

    WordPress Granola theme <= 1.13 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Granola <= 1.13 versions.

    ThemeREX Granola
  • High 8.1
    CVE-2025-69164

    WordPress Skyward theme <= 1.10 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Skyward <= 1.10 versions.

    ThemeREX Skyward
  • High 8.1
    CVE-2025-69157

    WordPress Gamic theme <= 1.15 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Gamic <= 1.15 versions.

    ThemeREX Gamic
  • High 8.1
    CVE-2025-69144

    WordPress Preservation theme <= 1.10 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Preservation <= 1.10 versions.

    ThemeREX Preservation
  • Critical 9.8
    CVE-2025-69127

    WordPress Plumbing theme <= 1.6 - PHP Object Injection vulnerability

    Unauthenticated PHP Object Injection in Plumbing <= 1.6 versions.

    ThemeREX Plumbing
  • High 8.1
    CVE-2025-69126

    WordPress Fortius theme <= 2.3.0 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Fortius <= 2.3.0 versions.

    ThemeREX Fortius
  • High 8.1
    CVE-2025-69123

    WordPress Snow Club theme <= 1.1 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Snow Club <= 1.1 versions.

    ThemeREX Snow Club
  • High 8.1
    CVE-2025-69120

    WordPress Dazzle theme <= 1.0.0 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Dazzle <= 1.0.0 versions.

    ThemeREX Dazzle
  • High 8.1
    CVE-2025-69115

    WordPress LuxMed | Medicine & Healthcare Doctor WordPress Theme theme <= 1.2.2 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in LuxMed | Medicine & Healthcare Doctor WordPress Theme <= 1.2.2 versions.

    ThemeREX LuxMed | Medicine & Healthcare Doctor WordPress Theme Web / CMS
  • Critical 9.8
    CVE-2025-69111

    WordPress Reisen theme <= 1.4.1 - PHP Object Injection vulnerability

    Unauthenticated PHP Object Injection in Reisen <= 1.4.1 versions.

    ThemeREX Reisen
  • High 8.1
    CVE-2025-69106

    WordPress Imba theme <= 1.5.0 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Imba <= 1.5.0 versions.

    ThemeREX Imba
  • High 8.1
    CVE-2026-22338

    WordPress EcoBlue theme <= 1.15 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in EcoBlue <= 1.15 versions.

    ThemeREX EcoBlue
  • High 8.1
    CVE-2026-22331

    WordPress AutoParts theme <= 1.5.8 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in AutoParts <= 1.5.8 versions.

    ThemeREX AutoParts
  • High 8.1
    CVE-2025-69173

    WordPress Tipsy theme <= 1.1 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Tipsy <= 1.1 versions.

    ThemeREX Tipsy
  • High 8.1
    CVE-2025-69172

    WordPress Resurs theme <= 1.3 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Resurs <= 1.3 versions.

    ThemeREX Resurs
  • High 8.1
    CVE-2025-69171

    WordPress Orpheus theme <= 1.3 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Orpheus <= 1.3 versions.

    ThemeREX Orpheus
  • High 8.1
    CVE-2025-69161

    WordPress Snowy theme <= 1.13 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Snowy <= 1.13 versions.

    ThemeREX Snowy
  • High 8.1
    CVE-2025-69148

    WordPress Quirky theme <= 1.23 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Quirky <= 1.23 versions.

    ThemeREX Quirky
  • High 8.1
    CVE-2025-69145

    WordPress Gat theme <= 1.16 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Gat <= 1.16 versions.

    ThemeREX Gat
  • High 8.1
    CVE-2025-69117

    WordPress Ingenioso theme <= 1.14.0 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Ingenioso <= 1.14.0 versions.

    ThemeREX Ingenioso
  • High 8.1
    CVE-2025-69110

    WordPress AirSupply theme <= 2.0.0 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in AirSupply <= 2.0.0 versions.

    ThemeREX AirSupply
  • Critical 9.8
    CVE-2025-60205

    WordPress ThemeREX Addons plugin <= 2.36.1.1 - PHP Object Injection vulnerability

    Deserialization of Untrusted Data vulnerability in ThemeREX Group ThemeREX Addons trx_addons allows Object Injection.This issue affects ThemeREX Addons: from n/a through 2.36.1.1.

    ThemeREX ThemeREX Addons
  • High 8.1
    CVE-2025-58954

    WordPress HomeRoofer theme <= 2.11.0 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in HomeRoofer <= 2.11.0 versions.

    ThemeREX HomeRoofer
  • High 8.1
    CVE-2025-58953

    WordPress Joly theme <= 1.22.0 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Joly <= 1.22.0 versions.

    ThemeREX Joly
  • High 8.1
    CVE-2025-58952

    WordPress Neuronet theme < 1.14.0 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Neuronet < 1.14.0 versions.

    ThemeREX Neuronet
  • Critical 9.8
    CVE-2026-39529

    WordPress Elementra theme <= 1.0.9 - PHP Object Injection vulnerability

    Unauthenticated PHP Object Injection in Elementra <= 1.0.9 versions.

    ThemeREX Elementra
  • High 8.1
    CVE-2025-69176

    WordPress ITactics theme <= 1.0 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in ITactics <= 1.0 versions.

    ThemeREX ITactics
  • High 8.1
    CVE-2025-69168

    WordPress Spike theme <= 1.2 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Spike <= 1.2 versions.

    ThemeREX Spike
  • High 8.1
    CVE-2025-69165

    WordPress Choreo theme <= 1.6 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Choreo <= 1.6 versions.

    ThemeREX Choreo
  • High 8.1
    CVE-2025-69167

    WordPress Eros theme <= 1.3 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Eros <= 1.3 versions.

    ThemeREX Eros
  • High 8.1
    CVE-2025-69163

    WordPress WineShop theme <= 3.17 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in WineShop <= 3.17 versions.

    ThemeREX WineShop
  • High 8.1
    CVE-2025-69162

    WordPress Grecko theme <= 5.17 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Grecko <= 5.17 versions.

    ThemeREX Grecko
  • High 8.1
    CVE-2025-69160

    WordPress Gita theme <= 1.11 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Gita <= 1.11 versions.

    ThemeREX Gita
  • High 8.1
    CVE-2025-69159

    WordPress Printo theme <= 1.11 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Printo <= 1.11 versions.

    ThemeREX Printo
  • High 8.1
    CVE-2025-69150

    WordPress Medeus theme <= 1.14 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Medeus <= 1.14 versions.

    ThemeREX Medeus
  • High 8.1
    CVE-2025-69149

    WordPress Top Dog theme <= 1.0.5 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Top Dog <= 1.0.5 versions.

    ThemeREX Top Dog
  • High 8.1
    CVE-2025-69146

    WordPress Dom theme <= 1.24 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Dom <= 1.24 versions.

    ThemeREX Dom