Skip to contentThemerex vulnerabilities
Newest
- themerex maxifyWordPress Maxify theme <= 1.0.16 - Local File Inclusion vulnerabilityCVE-2026-279978.1 High
- themerex lingvicoWordPress Lingvico theme <= 1.0.14 - Local File Inclusion vulnerabilityCVE-2026-279968.1 High
- themerex justitiaWordPress Justitia theme <= 1.1.0 - Local File Inclusion vulnerabilityCVE-2026-279958.1 High
- themerex tedissWordPress Tediss theme <= 1.2.4 - Local File Inclusion vulnerabilityCVE-2026-279948.1 High
- themerex aldoWordPress Aldo theme <= 1.0.10 - Local File Inclusion vulnerabilityCVE-2026-279938.1 High
- themerex meals & wheelsWordPress Meals & Wheels theme <= 1.1.12 - Local File Inclusion vulnerabilityCVE-2026-279928.1 High
- themerex avventureWordPress Avventure theme <= 1.1.12 - Local File Inclusion vulnerabilityCVE-2026-279918.1 High
- themerex confixWordPress ConFix theme <= 1.013 - Local File Inclusion vulnerabilityCVE-2026-279908.1 High
- themerex quanzoWordPress Quanzo theme <= 1.0.10 - Local File Inclusion vulnerabilityCVE-2026-279898.1 High
- themerex equadioWordPress Equadio theme <= 1.1.3 - Local File Inclusion vulnerabilityCVE-2026-279888.1 High
- themerex the qleanWordPress The Qlean theme <= 2.12 - Local File Inclusion vulnerabilityCVE-2026-279878.1 High
- themerex ostendeWordPress OsTende theme <= 1.4.3 - Local File Inclusion vulnerabilityCVE-2026-279868.1 High
- themerex humanumWordPress Humanum theme <= 1.1.4 - Local File Inclusion vulnerabilityCVE-2026-279858.1 High
- themerex dentarioWordPress Dentario theme <= 1.5 - PHP Object Injection vulnerabilityCVE-2026-274399.8 Critical
- themerex kinglerWordPress Kingler theme <= 1.7 - PHP Object Injection vulnerabilityCVE-2026-274389.8 Critical
- themerex tennis clubWordPress Tennis Club theme <= 1.2.3 - PHP Object Injection vulnerabilityCVE-2026-274379.8 Critical
- themerex equestrian centreWordPress Equestrian Centre theme <= 1.5 - PHP Object Injection vulnerabilityCVE-2026-224749.8 Critical
- themerex solarisWordPress Solaris theme <= 2.5 - PHP Object Injection vulnerabilityCVE-2026-224549.8 Critical
- themerex pets clubWordPress Pets Club theme <= 2.3 - PHP Object Injection vulnerabilityCVE-2026-224539.8 Critical
- themerex hoverexWordPress Hoverex theme <= 1.5.10 - Local File Inclusion vulnerabilityCVE-2026-224528.1 High
- themerex allianceWordPress Alliance theme <= 3.1.1 - Local File Inclusion vulnerabilityCVE-2026-224438.1 High
- themerex classterWordPress Classter theme <= 2.5 - PHP Object Injection vulnerabilityCVE-2025-540019.8 Critical
- themerex bergerWordPress Berger theme <= 1.1.1 - Local File Inclusion vulnerabilityCVE-2025-533358.1 High
- themerex freightcoWordPress FreightCo theme <= 1.1.7 - Local File Inclusion vulnerabilityCVE-2025-694068.1 High
- themerex lorem ipsum | books & media storeWordPress Lorem Ipsum | Books & Media Store theme <= 1.2.11 - PHP Object Injection vulnerabilityCVE-2025-694059.8 Critical
- themerex extreme storeWordPress Extreme Store theme <= 1.5.10 - PHP Object Injection vulnerabilityCVE-2025-694049.8 Critical
- themerex r&fWordPress R&F theme <= 1.5 - Local File Inclusion vulnerabilityCVE-2025-694028.1 High
- themerex yokooWordPress Yokoo theme <= 1.1.11 - Local File Inclusion vulnerabilityCVE-2025-694008.1 High
- themerex cobbleWordPress Cobble theme <= 1.7 - Local File Inclusion vulnerabilityCVE-2025-693998.1 High
- themerex plankWordPress Plank theme <= 1.7 - Local File Inclusion vulnerabilityCVE-2025-693988.1 High
- themerex tintWordPress Tint theme <= 1.7 - Local File Inclusion vulnerabilityCVE-2025-693978.1 High
- themerex splendourWordPress Splendour theme <= 1.23 - Local File Inclusion vulnerabilityCVE-2025-693968.1 High
- themerex gableWordPress Gable theme <= 1.5 - Local File Inclusion vulnerabilityCVE-2025-693958.1 High
- themerex sound | musical instruments online storeWordPress Sound | Musical Instruments Online Store theme <= 1.6.9 - Deserialization of untrusted data vulnerabilityCVE-2025-690799.8 Critical
- themerex hopeWordPress Hope theme <= 3.0.0 - Local File Inclusion vulnerabilityCVE-2025-690818.1 High
- themerex organic beautyWordPress Organic Beauty Theme <= 1.4.6 - PHP Object Injection VulnerabilityCVE-2025-498909.8 Critical
- themerex addonsThemeREX Addons <= 2.35.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via trx_addons_get_svg_from_file FunctionCVE-2025-69976.4 Medium
- themerex education center | lms & online courses wordpress themeEducation Center | LMS & Online Courses WordPress Theme <= 3.6.10 - PHP Object InjectionCVE-2024-137869.8 Critical
- themerex puzzles, puzzles | wp magazine / review with store wordpress theme + rtl +1 morePuzzles <= 4.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via ShortcodeCVE-2025-08376.4 Medium
- themerex puzzles, puzzles | wp magazine / review with store wordpress theme + rtl +1 morePuzzles | WP Magazine / Review with Store WordPress Theme + RTL <= 4.2.4 - Unauthenticated PHP Object InjectionCVE-2024-137708.1 High
- themerex puzzles, puzzles | wp magazine / review with store wordpress theme + rtl +1 morePuzzles | WP Magazine / Review with Store WordPress Theme + RTL <= 4.2.4 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site ScriptingCVE-2024-137696.4 Medium
- themerex addonsThemeREX Addons <= 2.32.3 - Unauthenticated Arbitrary File Upload in trx_addons_uploads_save_dataCVE-2024-134489.8 Critical
- themerex addonsThemeREX Addons <= 2.33.0 - Authenticated (Contributor+) Local File Inclusion via ShortcodeCVE-2025-06828.8 High
- blazeretail blaze retail widget, pedrogusmao02 wrapper link elementor, stuartobrien simply show hooks +3 more +5 moreSeveral WordPress.org Plugins <= Various Versions - Injected BackdoorCVE-2024-6297Public exploit10.0 Critical
- hcl software verseHCL Verse is susceptible to a Cross Site Scripting (XSS) vulnerabilityCVE-2021-277888.3 High
- johnkerl millerArbitrary code execution via configuration file in MillerCVE-2020-15167Fix available8.2 High
- themerex addons, aldo-gutenberg wordpress blog theme, amuli +60 more +62 moreThe ThemeREX Addons plugin before 2020-03-09 for WordPress lacks access control on the ...CVE-2020-10257Public exploit9.8 Critical