Skip to content
OpenAdvisories

Vendor

ThemeREX

266 known vulnerabilities.

Products

ThemeREX Addons 9 Puzzles | WP Magazine / Review with Store WordPress Theme + RTL 3 Tipsy 2 ShiftCV 2 Save Life 2 Ozisti 2 Filmax 2 Education Center 2 Preservation 2 Motorix 2 Marcell 2 Muzicon 2 Invetex 2 Asia Garden 2 Booked 2 Law Office 2 RexCoin 2 EmojiNation 2 Stargaze 2 N7 | Golf Club Sports & Events 2 FreightCo 2 Le Truffe 2 Bonbon 2 Coinpress 2 Edge Decor 2 Yacht Rental 2 Splendour 2 Gunslinger 2 Windsor 2 Nuts 2 Gamezone 2 Gamic 2 Printy 2 Avventure 2 Meals & Wheels 2 WineShop 2 Alliance 2 Quirky 2 Legal Stone 2 Orpheus 2
All Critical High Medium Low Exploited only Public exploit

266 results · Feed

  • High 8.1
    CVE-2025-69147

    WordPress Putter theme <= 1.17 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Putter <= 1.17 versions.

    ThemeREX Putter
  • High 8.1
    CVE-2025-69143

    WordPress Mission theme <= 1.22 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Mission <= 1.22 versions.

    ThemeREX Mission
  • High 8.1
    CVE-2025-69142

    WordPress Abelle theme <= 1.22 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Abelle <= 1.22 versions.

    ThemeREX Abelle
  • High 8.1
    CVE-2025-69141

    WordPress Kelly Young theme <= 1.1.0 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Kelly Young <= 1.1.0 versions.

    ThemeREX Kelly Young
  • High 8.1
    CVE-2025-69125

    WordPress Food Drop theme <= 1.3 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Food Drop <= 1.3 versions.

    ThemeREX Food Drop
  • High 8.1
    CVE-2025-69124

    WordPress Especio theme <= 1.0 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Especio <= 1.0 versions.

    ThemeREX Especio
  • Critical 9.8
    CVE-2025-69122

    WordPress SeaFood Company theme <= 1.4 - PHP Object Injection vulnerability

    Unauthenticated PHP Object Injection in SeaFood Company <= 1.4 versions.

    ThemeREX SeaFood Company
  • High 8.1
    CVE-2025-69121

    WordPress Deliciosa theme <= 1.10.0 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Deliciosa <= 1.10.0 versions.

    ThemeREX Deliciosa
  • High 8.1
    CVE-2025-69119

    WordPress Corbesier theme <= 1.15.0 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Corbesier <= 1.15.0 versions.

    ThemeREX Corbesier
  • High 8.1
    CVE-2025-69116

    WordPress Iona theme <= 1.0.8 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Iona <= 1.0.8 versions.

    ThemeREX Iona
  • High 8.1
    CVE-2025-69118

    WordPress CopyPress theme <= 1.4.5 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in CopyPress <= 1.4.5 versions.

    ThemeREX CopyPress
  • High 8.1
    CVE-2025-69114

    WordPress MaxiNet theme <= 1.2.10 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in MaxiNet <= 1.2.10 versions.

    ThemeREX MaxiNet
  • High 8.1
    CVE-2025-69113

    WordPress Nexio theme <= 1.10.0 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Nexio <= 1.10.0 versions.

    ThemeREX Nexio
  • High 8.1
    CVE-2025-69112

    WordPress Planty theme <= 1.14.0 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Planty <= 1.14.0 versions.

    ThemeREX Planty
  • High 8.1
    CVE-2025-69109

    WordPress Raider Spirit theme <= 1.1.2 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Raider Spirit <= 1.1.2 versions.

    ThemeREX Raider Spirit
  • High 8.1
    CVE-2025-69107

    WordPress Rosaleen theme <= 2.8 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Rosaleen <= 2.8 versions.

    ThemeREX Rosaleen
  • Critical 9.8
    CVE-2025-69108

    WordPress Hot Coffee theme <= 1.7 - PHP Object Injection vulnerability

    Unauthenticated PHP Object Injection in Hot Coffee <= 1.7 versions.

    ThemeREX Hot Coffee
  • High 8.1
    CVE-2025-69105

    WordPress Modernee theme <= 1.6.0 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Modernee <= 1.6.0 versions.

    ThemeREX Modernee
  • High 8.1
    CVE-2025-60085

    WordPress Learnify theme <= 1.15.0 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Learnify <= 1.15.0 versions.

    ThemeREX Learnify
  • High 8.1
    CVE-2025-58924

    WordPress Geya theme <= 1.15 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Geya <= 1.15 versions.

    ThemeREX Geya
  • Critical 9.8
    CVE-2026-27083

    WordPress Work & Travel Company theme <= 1.2 - PHP Object Injection vulnerability

    Deserialization of Untrusted Data vulnerability in ThemeREX Work & Travel Company work-travel-company allows Object Injection.This issue affects Work & Travel Company: from n/a through <= 1.2.

    ThemeREX Work & Travel Company
  • Critical 9.8
    CVE-2026-27082

    WordPress Love Story theme <= 1.3.12 - PHP Object Injection vulnerability

    Deserialization of Untrusted Data vulnerability in ThemeREX Love Story lovestory allows Object Injection.This issue affects Love Story: from n/a through <= 1.3.12.

    ThemeREX Love Story
  • Critical 9.8
    CVE-2026-27084

    WordPress Buisson theme <= 1.1.11 - PHP Object Injection vulnerability

    Deserialization of Untrusted Data vulnerability in ThemeREX Buisson buisson allows Object Injection.This issue affects Buisson: from n/a through <= 1.1.11.

    ThemeREX Buisson
  • High 8.1
    CVE-2026-22504

    WordPress ProLingua theme <= 1.1.12 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX ProLingua prolingua allows PHP Local File Inclusion.This issue affects ProLingua: from n/a through <= 1.1.12.

    ThemeREX ProLingua
  • High 8.1
    CVE-2026-22503

    WordPress Nelson theme <= 1.2.0 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Nelson nelson allows PHP Local File Inclusion.This issue affects Nelson: from n/a through <= 1.2.0.

    ThemeREX Nelson
  • High 8.1
    CVE-2026-22494

    WordPress Good Homes theme <= 1.3.13 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Good Homes good-homes allows PHP Local File Inclusion.This issue affects Good Homes: from n/a through <= 1.3.13.

    ThemeREX Good Homes
  • High 8.1
    CVE-2026-22324

    WordPress Melania theme <= 2.5.0 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Melania allows PHP Local File Inclusion.This issue affects Melania: from n/a through 2.5.0.

    ThemeREX Melania
  • High 8.1
    CVE-2026-28128

    WordPress Verse theme <= 1.7.0 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Verse verse allows PHP Local File Inclusion.This issue affects Verse: from n/a through <= 1.7.0.

    ThemeREX Verse
  • High 8.1
    CVE-2026-28120

    WordPress Dr.Patterson theme <= 1.3.2 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Dr.Patterson dr-patterson allows PHP Local File Inclusion.This issue affects Dr.Patterson: from n/a through <= 1.3.2.

    ThemeREX Dr.Patterson
  • High 8.1
    CVE-2026-28107

    WordPress Muzicon theme <= 1.9.0 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Muzicon muzicon allows PHP Local File Inclusion.This issue affects Muzicon: from n/a through <= 1.9.0.

    ThemeREX Muzicon
  • Critical 9.8
    CVE-2026-28105

    WordPress Good Energy theme <= 1.7.7 - PHP Object Injection vulnerability

    Deserialization of Untrusted Data vulnerability in ThemeREX Good Energy goodenergy allows Object Injection.This issue affects Good Energy: from n/a through <= 1.7.7.

    ThemeREX Good Energy
  • High 8.1
    CVE-2026-28097

    WordPress Artrium theme <= 1.0.14 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Artrium artrium allows PHP Local File Inclusion.This issue affects Artrium: from n/a through <= 1.0.14.

    ThemeREX Artrium
  • High 8.1
    CVE-2026-28098

    WordPress Save Life theme <= 1.2.13 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Save Life save-life allows PHP Local File Inclusion.This issue affects Save Life: from n/a through <= 1.2.13.

    ThemeREX Save Life
  • High 8.1
    CVE-2026-28092

    WordPress Sounder theme <= 1.3.11 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Sounder sounder allows PHP Local File Inclusion.This issue affects Sounder: from n/a through <= 1.3.11.

    ThemeREX Sounder
  • High 8.1
    CVE-2026-28094

    WordPress RexCoin theme <= 1.2.6 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX RexCoin rexcoin allows PHP Local File Inclusion.This issue affects RexCoin: from n/a through <= 1.2.6.

    ThemeREX RexCoin
  • High 8.1
    CVE-2026-28095

    WordPress Marcell theme <= 1.2.14 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Marcell marcell allows PHP Local File Inclusion.This issue affects Marcell: from n/a through <= 1.2.14.

    ThemeREX Marcell
  • High 8.1
    CVE-2026-28096

    WordPress WealthCo theme <= 2.18 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX WealthCo wealthco allows PHP Local File Inclusion.This issue affects WealthCo: from n/a through <= 2.18.

    ThemeREX WealthCo
  • High 8.1
    CVE-2026-28093

    WordPress Ozisti theme <= 1.1.10 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Ozisti ozisti allows PHP Local File Inclusion.This issue affects Ozisti: from n/a through <= 1.1.10.

    ThemeREX Ozisti
  • High 8.1
    CVE-2026-28091

    WordPress Coleo theme <= 1.1.7 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Coleo coleo allows PHP Local File Inclusion.This issue affects Coleo: from n/a through <= 1.1.7.

    ThemeREX Coleo
  • High 8.1
    CVE-2026-28087

    WordPress Filmax theme <= 1.1.11 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Filmax filmax allows PHP Local File Inclusion.This issue affects Filmax: from n/a through <= 1.1.11.

    ThemeREX Filmax