ThemeREX RexCoin

• CVE-2026-54856 Critical 9.8 WordPress RexCoin theme <= 1.2.6 - PHP Object Injection vulnerability 0.5%
• CVE-2026-28094 High 8.1 WordPress RexCoin theme <= 1.2.6 - Local File Inclusion vulnerability 0.5%