Skip to content
Themerex Group vulnerabilities
Newest
-
axiomthemes helion
WordPress Helion theme <= 1.1.12 - PHP Object Injection vulnerability
CVE-2026-112852
8.1 High
-
themerex group hotlock
WordPress HotLock theme <= 1.3.9 - PHP Object Injection vulnerability
CVE-2026-112851
9.8 Critical
-
themerex save life
WordPress Save Life theme <= 1.2.14 - PHP Object Injection vulnerability
CVE-2026-112846
9.8 Critical
-
axiomthemes little birdies
WordPress Little Birdies theme <= 1.3.16 - PHP Object Injection vulnerability
CVE-2026-112859
9.8 Critical
-
themerex group vagabonds
WordPress Vagabonds theme <= 1.3.10 - PHP Object Injection vulnerability
CVE-2026-112856
9.8 Critical
-
ancorathemes kids planet
WordPress Kids Planet theme <= 2.2.14.2 - Cross Site Scripting (XSS) vulnerability
CVE-2026-57742
7.1 High
-
themerex group booklovers
WordPress Booklovers theme <= 2.13.0 - PHP Object Injection vulnerability
CVE-2026-62045
9.8 Critical
-
themerex group camelia
WordPress Camelia theme <= 1.2.15 - PHP Object Injection vulnerability
CVE-2026-93944
9.8 Critical
-
axiomthemes convex
WordPress Convex theme <= 1.16.0 - PHP Object Injection vulnerability
CVE-2026-93943
9.8 Critical
-
axiomthemes dwell
WordPress Dwell theme <= 1.16.0 - PHP Object Injection vulnerability
CVE-2026-93942
9.8 Critical
-
themerex group gutentype
WordPress Gutentype theme <= 2.1.12 - PHP Object Injection vulnerability
CVE-2026-62046
9.8 Critical
-
themerex group edema
WordPress Edema theme <= 1.2.2.2 - PHP Object Injection vulnerability
CVE-2026-93941
9.8 Critical
-
axiomthemes greeny
WordPress Greeny theme <= 2.10.0 - PHP Object Injection vulnerability
CVE-2026-93940
9.8 Critical
-
themerex group hogwords
WordPress Hogwords theme <= 1.2.7 - PHP Object Injection vulnerability
CVE-2026-93938
9.8 Critical
-
axiomthemes hygia
WordPress Hygia theme <= 1.21.0 - PHP Object Injection vulnerability
CVE-2026-93937
9.8 Critical
-
axiomthemes ipharm
WordPress IPharm theme <= 1.2.4 - PHP Object Injection vulnerability
CVE-2026-93936
9.8 Critical
-
themerex group let's play
WordPress Let's Play theme <= 1.1.15 - PHP Object Injection vulnerability
CVE-2026-93935
9.8 Critical
-
themerex group partiso
WordPress Partiso theme <= 1.1.13 - PHP Object Injection vulnerability
CVE-2026-93934
9.8 Critical
-
axiomthemes rosalinda
WordPress Rosalinda theme <= 1.2.4 - PHP Object Injection vulnerability
CVE-2026-93933
9.8 Critical
-
themerex group smart casa
WordPress Smart Casa theme <= 1.0.12 - PHP Object Injection vulnerability
CVE-2026-93932
9.8 Critical
-
axiomthemes smash
WordPress Smash theme <= 1.12.0 - PHP Object Injection vulnerability
CVE-2026-93931
9.8 Critical
-
themerex group tantra
WordPress Tantra theme <= 2.9.0 - PHP Object Injection vulnerability
CVE-2026-93930
9.8 Critical
-
themerex group travesia
WordPress Travesia theme <= 1.1.16 - PHP Object Injection vulnerability
CVE-2026-93929
9.8 Critical
-
themerex addons
WordPress ThemeREX Addons plugin <= 2.46.0 - Server Side Request Forgery (SSRF) vulnerability
CVE-2026-102797
6.4 Medium
-
themerex addons
WordPress ThemeREX Addons plugin <= 2.46.0 - Cross Site Scripting (XSS) vulnerability
CVE-2026-102798
6.5 Medium
-
themerex addons
WordPress ThemeREX Addons plugin <= 2.36.1.1 - PHP Object Injection vulnerability
CVE-2025-60205
9.8 Critical
-
themerex group elementra
WordPress Elementra theme <= 1.0.9 - PHP Object Injection vulnerability
CVE-2026-39529
9.8 Critical
-
themerex group learnify
WordPress Learnify theme <= 1.15.0 - Local File Inclusion vulnerability
CVE-2025-60085
8.1 High
-
themerex group geya
WordPress Geya theme <= 1.15 - Local File Inclusion vulnerability
CVE-2025-58924
8.1 High
-
themerex hope
WordPress Hope theme <= 3.0.0 - Local File Inclusion vulnerability
CVE-2025-69081
8.1 High