Themerex

184 CVEs across 242 Themerex products. Browse Themerex vulnerabilities, severities, and proof-of-concept exploits.

Themerex products with known CVEs

ProductCVEs
Addons4
Themerex Addons4
Puzzles3
Puzzles | Wp Magazine / Review With Store Wordpress Theme + Rtl3
Abelle2
Booked2
Gridiron2
Vapester2
Airsupply1
Aldo1
Aldo-Gutenberg Wordpress Blog Theme1
Alliance1
Amuli1
Aqualots1
Artrium1
Asia Garden1
Autoparts1
Avventure1
Bassein1
Bazinga1
Beacon1
Berger1
Blabber1
Bonbon1
Bonkozoo Zoo1
Briny-Diving Wordpress Theme1
Bugster-Pests Control1
Buisson1
Buzz Stone-Magazine \& Blog1
Chainpress1
Chit Club-Board Games1
Choreo1
Chroma1
Classter1
Cobble1
Coinpress1
Coinpress-Cryptocurrency Magazine \& Blog Wordpress Theme1
Coleo1
Confix1
Contact Form 7 Multi-Step Addon1
Copypress1
Corbesier1
Corredo Sport Event1
Craftis1
Daiquiri1
Dazzle1
Deliciosa1
Dentario1
Dermatology Clinic1
Dixon1
Themerex CVEs — newest first (page 1 of 2)
CVESeverityScorePublishedSummary
CVE-2026-65573Critical9.82026-08-06Unauthenticated PHP Object Injection in Abelle <= 1.22 versions.
CVE-2026-57747Medium6.52026-07-02Unauthenticated Cross Site Request Forgery (CSRF) in Booked <= 3.0.0 versions.
CVE-2026-57746High7.12026-07-02Subscriber Broken Access Control in Booked <= 3.0.0 versions.
CVE-2025-69175High8.12026-06-17Unauthenticated Local File Inclusion in Line Agency <= 1.3.1 versions.
CVE-2025-69174High8.12026-06-17Unauthenticated Local File Inclusion in Etude <= 1.6 versions.
CVE-2025-69170High8.12026-06-17Unauthenticated Local File Inclusion in Eventicity <= 1.5 versions.
CVE-2025-69166High8.12026-06-17Unauthenticated Local File Inclusion in Gunslinger <= 1.7 versions.
CVE-2025-69164High8.12026-06-17Unauthenticated Local File Inclusion in Skyward <= 1.10 versions.
CVE-2025-69158High8.12026-06-17Unauthenticated Local File Inclusion in Granola <= 1.13 versions.
CVE-2025-69157High8.12026-06-17Unauthenticated Local File Inclusion in Gamic <= 1.15 versions.
CVE-2025-69144High8.12026-06-17Unauthenticated Local File Inclusion in Preservation <= 1.10 versions.
CVE-2025-69127Critical9.82026-06-17Unauthenticated PHP Object Injection in Plumbing <= 1.6 versions.
CVE-2025-69126High8.12026-06-17Unauthenticated Local File Inclusion in Fortius <= 2.3.0 versions.
CVE-2025-69123High8.12026-06-17Unauthenticated Local File Inclusion in Snow Club <= 1.1 versions.
CVE-2025-69120High8.12026-06-17Unauthenticated Local File Inclusion in Dazzle <= 1.0.0 versions.
CVE-2025-69115High8.12026-06-17Unauthenticated Local File Inclusion in LuxMed | Medicine & Healthcare Doctor WordPress Theme <= 1.2.2 versions.
CVE-2025-69111Critical9.82026-06-17Unauthenticated PHP Object Injection in Reisen <= 1.4.1 versions.
CVE-2025-69106High8.12026-06-17Unauthenticated Local File Inclusion in Imba <= 1.5.0 versions.
CVE-2026-22338High8.12026-06-17Unauthenticated Local File Inclusion in EcoBlue <= 1.15 versions.
CVE-2026-22331High8.12026-06-17Unauthenticated Local File Inclusion in AutoParts <= 1.5.8 versions.
CVE-2025-69176High8.12026-06-17Unauthenticated Local File Inclusion in ITactics <= 1.0 versions.
CVE-2025-69173High8.12026-06-17Unauthenticated Local File Inclusion in Tipsy <= 1.1 versions.
CVE-2025-69172High8.12026-06-17Unauthenticated Local File Inclusion in Resurs <= 1.3 versions.
CVE-2025-69171High8.12026-06-17Unauthenticated Local File Inclusion in Orpheus <= 1.3 versions.
CVE-2025-69168High8.12026-06-17Unauthenticated Local File Inclusion in Spike <= 1.2 versions.
CVE-2025-69167High8.12026-06-17Unauthenticated Local File Inclusion in Eros <= 1.3 versions.
CVE-2025-69165High8.12026-06-17Unauthenticated Local File Inclusion in Choreo <= 1.6 versions.
CVE-2025-69163High8.12026-06-17Unauthenticated Local File Inclusion in WineShop <= 3.17 versions.
CVE-2025-69162High8.12026-06-17Unauthenticated Local File Inclusion in Grecko <= 5.17 versions.
CVE-2025-69161High8.12026-06-17Unauthenticated Local File Inclusion in Snowy <= 1.13 versions.
CVE-2025-69160High8.12026-06-17Unauthenticated Local File Inclusion in Gita <= 1.11 versions.
CVE-2025-69159High8.12026-06-17Unauthenticated Local File Inclusion in Printo <= 1.11 versions.
CVE-2025-69150High8.12026-06-17Unauthenticated Local File Inclusion in Medeus <= 1.14 versions.
CVE-2025-69149High8.12026-06-17Unauthenticated Local File Inclusion in Top Dog <= 1.0.5 versions.
CVE-2025-69148High8.12026-06-17Unauthenticated Local File Inclusion in Quirky <= 1.23 versions.
CVE-2025-69147High8.12026-06-17Unauthenticated Local File Inclusion in Putter <= 1.17 versions.
CVE-2025-69146High8.12026-06-17Unauthenticated Local File Inclusion in Dom <= 1.24 versions.
CVE-2025-69145High8.12026-06-17Unauthenticated Local File Inclusion in Gat <= 1.16 versions.
CVE-2025-69143High8.12026-06-17Unauthenticated Local File Inclusion in Mission <= 1.22 versions.
CVE-2025-69142High8.12026-06-17Unauthenticated Local File Inclusion in Abelle <= 1.22 versions.
CVE-2025-69141High8.12026-06-17Unauthenticated Local File Inclusion in Kelly Young <= 1.1.0 versions.
CVE-2025-69125High8.12026-06-17Unauthenticated Local File Inclusion in Food Drop <= 1.3 versions.
CVE-2025-69124High8.12026-06-17Unauthenticated Local File Inclusion in Especio <= 1.0 versions.
CVE-2025-69122Critical9.82026-06-17Unauthenticated PHP Object Injection in SeaFood Company <= 1.4 versions.
CVE-2025-69121High8.12026-06-17Unauthenticated Local File Inclusion in Deliciosa <= 1.10.0 versions.
CVE-2025-69119High8.12026-06-17Unauthenticated Local File Inclusion in Corbesier <= 1.15.0 versions.
CVE-2025-69118High8.12026-06-17Unauthenticated Local File Inclusion in CopyPress <= 1.4.5 versions.
CVE-2025-69117High8.12026-06-17Unauthenticated Local File Inclusion in Ingenioso <= 1.14.0 versions.
CVE-2025-69116High8.12026-06-17Unauthenticated Local File Inclusion in Iona <= 1.0.8 versions.
CVE-2025-69114High8.12026-06-17Unauthenticated Local File Inclusion in MaxiNet <= 1.2.10 versions.
CVE-2025-69113High8.12026-06-17Unauthenticated Local File Inclusion in Nexio <= 1.10.0 versions.
CVE-2025-69112High8.12026-06-17Unauthenticated Local File Inclusion in Planty <= 1.14.0 versions.
CVE-2025-69110High8.12026-06-17Unauthenticated Local File Inclusion in AirSupply <= 2.0.0 versions.
CVE-2025-69109High8.12026-06-17Unauthenticated Local File Inclusion in Raider Spirit <= 1.1.2 versions.
CVE-2025-69108Critical9.82026-06-17Unauthenticated PHP Object Injection in Hot Coffee <= 1.7 versions.
CVE-2025-69107High8.12026-06-17Unauthenticated Local File Inclusion in Rosaleen <= 2.8 versions.
CVE-2025-69105High8.12026-06-17Unauthenticated Local File Inclusion in Modernee <= 1.6.0 versions.
CVE-2025-60205Critical9.82026-06-17Unauthenticated PHP Object Injection in ThemeREX Addons <= 2.36.1.1 versions.
CVE-2025-58954High8.12026-06-17Unauthenticated Local File Inclusion in HomeRoofer <= 2.11.0 versions.
CVE-2025-58953High8.12026-06-17Unauthenticated Local File Inclusion in Joly <= 1.22.0 versions.
CVE-2025-58952High8.12026-06-17Unauthenticated Local File Inclusion in Neuronet < 1.14.0 versions.
CVE-2026-27084Critical9.82026-03-25Deserialization of Untrusted Data vulnerability in ThemeREX Buisson buisson allows Object Injection.This issue affects Buisson: from n/a through <= 1.1.11.
CVE-2026-27083Critical9.82026-03-25Deserialization of Untrusted Data vulnerability in ThemeREX Work & Travel Company work-travel-company allows Object Injection.This issue affects Work & Travel…
CVE-2026-27082Critical9.82026-03-25Deserialization of Untrusted Data vulnerability in ThemeREX Love Story lovestory allows Object Injection.This issue affects Love Story: from n/a through <= 1.3…
CVE-2026-22504High8.12026-03-25Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX ProLingua prolingua allows PH…
CVE-2026-22503High8.12026-03-25Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Nelson nelson allows PHP Loca…
CVE-2026-22494High8.12026-03-25Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Good Homes good-homes allows…
CVE-2026-22324High8.12026-03-20Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Melania allows PHP Local File…
CVE-2026-28128High8.12026-03-05Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Verse verse allows PHP Local…
CVE-2026-28120High8.12026-03-05Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Dr.Patterson dr-patterson all…
CVE-2026-28107High8.12026-03-05Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Muzicon muzicon allows PHP Lo…
CVE-2026-28105Critical9.82026-03-05Deserialization of Untrusted Data vulnerability in ThemeREX Good Energy goodenergy allows Object Injection.This issue affects Good Energy: from n/a through <=…
CVE-2026-28098High8.12026-03-05Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Save Life save-life allows PH…
CVE-2026-28097High8.12026-03-05Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Artrium artrium allows PHP Lo…
CVE-2026-28096High8.12026-03-05Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX WealthCo wealthco allows PHP…
CVE-2026-28095High8.12026-03-05Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Marcell marcell allows PHP Lo…
CVE-2026-28094High8.12026-03-05Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX RexCoin rexcoin allows PHP Lo…
CVE-2026-28093High8.12026-03-05Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Ozisti ozisti allows PHP Loca…
CVE-2026-28092High8.12026-03-05Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Sounder sounder allows PHP Lo…
CVE-2026-28091High8.12026-03-05Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Coleo coleo allows PHP Local…
CVE-2026-28090High8.12026-03-05Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Gamezone gamezone allows PHP…
CVE-2026-28089High8.12026-03-05Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Daiquiri daiquiri allows PHP…
CVE-2026-28088High8.12026-03-05Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Aqualots aqualots allows PHP…
CVE-2026-28087High8.12026-03-05Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Filmax filmax allows PHP Loca…
CVE-2026-28086High8.12026-03-05Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Run Gran run-gran allows PHP…
CVE-2026-28085High8.12026-03-05Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Mahogany mahogany allows PHP…
CVE-2026-28084High8.12026-03-05Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Bazinga bazinga allows PHP Lo…
CVE-2026-28081High8.12026-03-05Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Windsor windsor allows PHP Lo…
CVE-2026-28077High8.12026-03-05Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Vapester vapester allows PHP…
CVE-2026-28074Critical9.82026-03-05Deserialization of Untrusted Data vulnerability in ThemeREX Pizza House pizzahouse allows Object Injection.This issue affects Pizza House: from n/a through <=…
CVE-2026-28069High8.12026-03-05Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Le Truffe letruffe allows PHP…
CVE-2026-28068High8.12026-03-05Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Rhythmo rhythmo allows PHP Lo…
CVE-2026-28067High8.12026-03-05Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Bassein bassein allows PHP Lo…
CVE-2026-28066High8.12026-03-05Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Legrand legrand allows PHP Lo…
CVE-2026-28065High8.12026-03-05Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Eject eject allows PHP Local…
CVE-2026-28064High8.12026-03-05Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Edge Decor edge-decor allows…
CVE-2026-28063High8.12026-03-05Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Asia Garden asia-garden allow…
CVE-2026-28062High8.12026-03-05Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Happy Baby happy-baby allows…
CVE-2026-28061High8.12026-03-05Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Tiger Claw tiger-claw allows…
CVE-2026-28060High8.12026-03-05Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX S.King stephanie-king allows…