CVE-2026-93944 | Critical | 9.8 | 2026-10-10 | Deserialization of Untrusted Data vulnerability in ThemeREX Group Camelia camelia allows Object Injection.This issue affects Camelia: from n/a through 1.2.15. |
CVE-2026-93943 | Critical | 9.8 | 2026-10-10 | Deserialization of Untrusted Data vulnerability in ThemeREX Group Convex convex allows Object Injection.This issue affects Convex: from n/a through 1.16.0. |
CVE-2026-93942 | Critical | 9.8 | 2026-10-10 | Deserialization of Untrusted Data vulnerability in ThemeREX Group Dwell dwell allows Object Injection.This issue affects Dwell: from n/a through 1.16.0. |
CVE-2026-93941 | Critical | 9.8 | 2026-10-10 | Deserialization of Untrusted Data vulnerability in ThemeREX Group Edema edema allows Object Injection.This issue affects Edema: from n/a through 1.2.2.2. |
CVE-2026-93940 | Critical | 9.8 | 2026-10-10 | Deserialization of Untrusted Data vulnerability in ThemeREX Group Greeny greeny allows Object Injection.This issue affects Greeny: from n/a through 2.10.0. |
CVE-2026-93938 | Critical | 9.8 | 2026-10-10 | Deserialization of Untrusted Data vulnerability in ThemeREX Group Hogwords hogwords allows Object Injection.This issue affects Hogwords: from n/a through 1.2.7. |
CVE-2026-93937 | Critical | 9.8 | 2026-10-10 | Deserialization of Untrusted Data vulnerability in ThemeREX Group Hygia hygia allows Object Injection.This issue affects Hygia: from n/a through 1.21.0. |
CVE-2026-93936 | Critical | 9.8 | 2026-10-10 | Deserialization of Untrusted Data vulnerability in ThemeREX Group IPharm ipharm allows Object Injection.This issue affects IPharm: from n/a through 1.2.4. |
CVE-2026-93935 | Critical | 9.8 | 2026-10-10 | Deserialization of Untrusted Data vulnerability in ThemeREX Group Let's Play playhockey allows Object Injection.This issue affects Let's Play: from n/a through… |
CVE-2026-93934 | Critical | 9.8 | 2026-10-10 | Deserialization of Untrusted Data vulnerability in ThemeREX Group Partiso partiso allows Object Injection.This issue affects Partiso: from n/a through 1.1.13. |
CVE-2026-93933 | Critical | 9.8 | 2026-10-10 | Deserialization of Untrusted Data vulnerability in ThemeREX Group Rosalinda rosalinda allows Object Injection.This issue affects Rosalinda: from n/a through 1… |
CVE-2026-93932 | Critical | 9.8 | 2026-10-10 | Deserialization of Untrusted Data vulnerability in ThemeREX Group Smart Casa smart-casa allows Object Injection.This issue affects Smart Casa: from n/a through… |
CVE-2026-93931 | Critical | 9.8 | 2026-10-10 | Deserialization of Untrusted Data vulnerability in ThemeREX Group Smash smash allows Object Injection.This issue affects Smash: from n/a through 1.12.0. |
CVE-2026-93930 | Critical | 9.8 | 2026-10-10 | Deserialization of Untrusted Data vulnerability in ThemeREX Group Tantra tantra allows Object Injection.This issue affects Tantra: from n/a through 2.9.0. |
CVE-2026-93929 | Critical | 9.8 | 2026-10-10 | Deserialization of Untrusted Data vulnerability in ThemeREX Group Travesia travesia allows Object Injection.This issue affects Travesia: from n/a through 1.1.1… |
CVE-2026-62046 | Critical | 9.8 | 2026-10-10 | Deserialization of Untrusted Data vulnerability in ThemeREX Group Gutentype gutentype allows Object Injection.This issue affects Gutentype: from n/a through 2… |
CVE-2026-62045 | Critical | 9.8 | 2026-10-10 | Deserialization of Untrusted Data vulnerability in ThemeREX Group Booklovers booklovers allows Object Injection.This issue affects Booklovers: from n/a through… |
CVE-2026-102797 | Medium | 6.4 | 2026-10-02 | Server-Side Request Forgery (SSRF) vulnerability in ThemeREX Group ThemeREX Addons trx_addons allows Server Side Request Forgery.This issue affects ThemeREX Ad… |
CVE-2026-39529 | Critical | 9.8 | 2026-06-17 | Unauthenticated PHP Object Injection in Elementra <= 1.0.9 versions. |
CVE-2025-60085 | High | 8.1 | 2026-06-17 | Unauthenticated Local File Inclusion in Learnify <= 1.15.0 versions. |
CVE-2025-58924 | High | 8.1 | 2026-06-17 | Unauthenticated Local File Inclusion in Geya <= 1.15 versions. |