Log in Start free

ThemeREX Group

Products

ProductCVEsExploitedLatest
ThemeREX Addons3–Oct 2, 2026
Camelia1–Oct 10, 2026
Convex1–Oct 10, 2026
Dwell1–Oct 10, 2026
Edema1–Oct 10, 2026
Elementra1–Jun 16, 2026
Geya1–Jun 16, 2026
Greeny1–Oct 10, 2026
Gutentype1–Oct 10, 2026
Helion1–Oct 23, 2026
Hogwords1–Oct 10, 2026
HotLock1–Oct 23, 2026
Hygia1–Oct 10, 2026
IPharm1–Oct 10, 2026
Kids Planet1–Oct 10, 2026
Learnify1–Jun 16, 2026
Let's Play1–Oct 10, 2026
Little Birdies1–Oct 23, 2026
Partiso1–Oct 10, 2026
Rosalinda1–Oct 10, 2026
Save Life1–Oct 23, 2026
Smart Casa1–Oct 10, 2026
Smash1–Oct 10, 2026
Tantra1–Oct 10, 2026
Travesia1–Oct 10, 2026
Booklovers1–Oct 10, 2026
Vagabonds1–Oct 23, 2026

Exploited and recent CVEs

  • CVE-2026-112846 Critical 9.8 WordPress Save Life theme <= 1.2.14 - PHP Object Injection vulnerability 0.3%
  • CVE-2026-112851 Critical 9.8 WordPress HotLock theme <= 1.3.9 - PHP Object Injection vulnerability 0.3%
  • CVE-2026-112852 High 8.1 WordPress Helion theme <= 1.1.12 - PHP Object Injection vulnerability 0.3%
  • CVE-2026-112856 Critical 9.8 WordPress Vagabonds theme <= 1.3.10 - PHP Object Injection vulnerability 0.3%
  • CVE-2026-112859 Critical 9.8 WordPress Little Birdies theme <= 1.3.16 - PHP Object Injection vulnerability 0.3%
  • CVE-2026-57742 High 7.1 WordPress Kids Planet theme <= 2.2.14.2 - Cross Site Scripting (XSS) vulnerability 0.1%
  • CVE-2026-62045 Critical 9.8 WordPress Booklovers theme <= 2.13.0 - PHP Object Injection vulnerability 0.3%
  • CVE-2026-62046 Critical 9.8 WordPress Gutentype theme <= 2.1.12 - PHP Object Injection vulnerability 0.3%
  • CVE-2026-93944 Critical 9.8 WordPress Camelia theme <= 1.2.15 - PHP Object Injection vulnerability 0.3%
  • CVE-2026-93943 Critical 9.8 WordPress Convex theme <= 1.16.0 - PHP Object Injection vulnerability 0.3%
  • CVE-2026-93942 Critical 9.8 WordPress Dwell theme <= 1.16.0 - PHP Object Injection vulnerability 0.3%
  • CVE-2026-93941 Critical 9.8 WordPress Edema theme <= 1.2.2.2 - PHP Object Injection vulnerability 0.3%
  • CVE-2026-93940 Critical 9.8 WordPress Greeny theme <= 2.10.0 - PHP Object Injection vulnerability 0.3%
  • CVE-2026-93938 Critical 9.8 WordPress Hogwords theme <= 1.2.7 - PHP Object Injection vulnerability 0.3%
  • CVE-2026-93937 Critical 9.8 WordPress Hygia theme <= 1.21.0 - PHP Object Injection vulnerability 0.3%
  • CVE-2026-93936 Critical 9.8 WordPress IPharm theme <= 1.2.4 - PHP Object Injection vulnerability 0.3%
  • CVE-2026-93935 Critical 9.8 WordPress Let's Play theme <= 1.1.15 - PHP Object Injection vulnerability 0.3%
  • CVE-2026-93934 Critical 9.8 WordPress Partiso theme <= 1.1.13 - PHP Object Injection vulnerability 0.3%
  • CVE-2026-93933 Critical 9.8 WordPress Rosalinda theme <= 1.2.4 - PHP Object Injection vulnerability 0.3%
  • CVE-2026-93932 Critical 9.8 WordPress Smart Casa theme <= 1.0.12 - PHP Object Injection vulnerability 0.3%
  • CVE-2026-93931 Critical 9.8 WordPress Smash theme <= 1.12.0 - PHP Object Injection vulnerability 0.3%
  • CVE-2026-93930 Critical 9.8 WordPress Tantra theme <= 2.9.0 - PHP Object Injection vulnerability 0.3%
  • CVE-2026-93929 Critical 9.8 WordPress Travesia theme <= 1.1.16 - PHP Object Injection vulnerability 0.3%
  • CVE-2026-102797 Medium 6.4 WordPress ThemeREX Addons plugin <= 2.46.0 - Server Side Request Forgery (SSRF) vulnerability 0.1%
  • CVE-2026-102798 Medium 6.5 WordPress ThemeREX Addons plugin <= 2.46.0 - Cross Site Scripting (XSS) vulnerability 0.1%
  • CVE-2025-60205 Critical 9.8 WordPress ThemeREX Addons plugin <= 2.36.1.1 - PHP Object Injection vulnerability 0.5%
  • CVE-2026-39529 Critical 9.8 WordPress Elementra theme <= 1.0.9 - PHP Object Injection vulnerability 0.4%
  • CVE-2025-60085 High 8.1 WordPress Learnify theme <= 1.15.0 - Local File Inclusion vulnerability 0.4%
  • CVE-2025-58924 High 8.1 WordPress Geya theme <= 1.15 - Local File Inclusion vulnerability 0.4%