ThemeREX

Products

Product	CVEs	Exploited	Latest
ThemeREX Addons	6	–	Sep 30, 2026
Puzzles \| WP Magazine / Review with Store WordPress Theme + RTL	3	–	Feb 13, 2025
Muzicon	2	–	Oct 29, 2026
N7 \| Golf Club Sports & Events	2	–	Oct 10, 2026
Abelle	2	–	Aug 6, 2026
Gamic	2	–	Oct 29, 2026
Bonbon	2	–	Oct 29, 2026
Nuts	2	–	Oct 29, 2026
Booked	2	–	Jul 2, 2026
ShiftCV	2	–	Oct 10, 2026
Orpheus	2	–	Oct 29, 2026
Edge Decor	2	–	Oct 29, 2026
Alliance	2	–	Oct 10, 2026
Ozisti	2	–	Oct 29, 2026
Invetex	2	–	Oct 10, 2026
Good Homes	2	–	Oct 29, 2026
Education Center	2	–	Oct 10, 2026
Splendour	2	–	Oct 10, 2026
Stargaze	2	–	Oct 10, 2026
Filmax	2	–	Oct 29, 2026
Coinpress	2	–	Oct 29, 2026
Avventure	2	–	Oct 29, 2026
Marcell	2	–	Oct 29, 2026
Gunslinger	2	–	Oct 29, 2026
Tipsy	2	–	Oct 10, 2026
Preservation	2	–	Oct 29, 2026
EmojiNation	2	–	Oct 29, 2026
Printy	2	–	Oct 29, 2026
Equadio	2	–	Oct 10, 2026
Meals & Wheels	2	–	Oct 29, 2026
Asia Garden	2	–	Oct 10, 2026
Windsor	2	–	Oct 10, 2026
Gamezone	2	–	Oct 29, 2026
WineShop	2	–	Oct 10, 2026
Quirky	2	–	Oct 29, 2026
Yacht Rental	2	–	Oct 10, 2026
Law Office	2	–	Oct 10, 2026
Mission	2	–	Oct 29, 2026
Le Truffe	2	–	Oct 29, 2026
Legal Stone	2	–	Oct 29, 2026
RexCoin	2	–	Oct 29, 2026
Motorix	2	–	Oct 29, 2026
Foodie	1	–	Mar 5, 2026
Fortius	1	–	Jun 17, 2026
FreightCo	1	–	Feb 20, 2026
Gable	1	–	Feb 20, 2026
Gat	1	–	Jun 17, 2026
Gita	1	–	Jun 16, 2026
Global Logistics	1	–	Mar 5, 2026
Good Energy	1	–	Mar 5, 2026
Granola	1	–	Jun 17, 2026
Grecko	1	–	Jun 16, 2026
Green Thumb	1	–	Mar 5, 2026
Gridiron	1	–	Mar 5, 2026
Happy Baby	1	–	Mar 5, 2026
Healer - Doctor, Clinic & Medical WordPress Theme	1	–	Mar 5, 2026
HomeRoofer	1	–	Jun 17, 2026
Hope	1	–	Jan 7, 2026
Hot Coffee	1	–	Jun 16, 2026
Hoverex	1	–	Mar 5, 2026
Humanum	1	–	Mar 5, 2026
Imba	1	–	Jun 17, 2026
Ingenioso	1	–	Jun 17, 2026
Iona	1	–	Jun 16, 2026
ITactics	1	–	Jun 16, 2026
Jacqueline	1	–	Oct 10, 2026
Joly	1	–	Jun 17, 2026
Juno	1	–	Oct 10, 2026
Justitia	1	–	Mar 5, 2026
Kayon	1	–	Mar 5, 2026
Kelly Young	1	–	Jun 16, 2026
Kingler	1	–	Mar 5, 2026
Kratz	1	–	Mar 5, 2026
Legrand	1	–	Mar 5, 2026
Line Agency	1	–	Jun 17, 2026
Lingvico	1	–	Mar 5, 2026
Lorem Ipsum \| Books & Media Store	1	–	Feb 20, 2026
Love Story	1	–	Mar 25, 2026
LuxMed \| Medicine & Healthcare Doctor WordPress Theme	1	–	Jun 17, 2026
Luxury Wine	1	–	Mar 5, 2026
M.Williamson	1	–	Mar 5, 2026
Mahogany	1	–	Mar 5, 2026
Mandala	1	–	Mar 5, 2026
Manoir	1	–	Mar 5, 2026
Maxify	1	–	Mar 5, 2026
MaxiNet	1	–	Jun 16, 2026
MCKinney's Politics	1	–	Mar 5, 2026
Medeus	1	–	Jun 16, 2026
Melania	1	–	Mar 20, 2026
Miller	1	–	Mar 5, 2026
Modernee	1	–	Jun 16, 2026
MoneyFlow	1	–	Mar 5, 2026
Neuronet	1	–	Jun 17, 2026
Nexio	1	–	Jun 16, 2026
Organic Beauty	1	–	Aug 20, 2025
OsTende	1	–	Mar 5, 2026
Ozeum	1	–	Oct 10, 2026
Peter Mason	1	–	Mar 5, 2026
Pets Club	1	–	Mar 5, 2026
Photolia	1	–	Oct 10, 2026
Pizza House	1	–	Mar 5, 2026
Plank	1	–	Feb 20, 2026
Planty	1	–	Jun 16, 2026
Plumbing	1	–	Jun 17, 2026
Police Department	1	–	Mar 5, 2026
Printo	1	–	Jun 16, 2026
Progress	1	–	Mar 5, 2026
ProLingua	1	–	Mar 25, 2026
Putter	1	–	Jun 16, 2026
Quanzo	1	–	Mar 5, 2026
Raider Spirit	1	–	Jun 16, 2026
Reisen	1	–	Jun 17, 2026
Resurs	1	–	Jun 17, 2026
R&F	1	–	Feb 20, 2026
Rhythmo	1	–	Mar 5, 2026
Rosaleen	1	–	Jun 16, 2026
Royal Event	1	–	Oct 30, 2026
Run Gran	1	–	Mar 5, 2026
S.King	1	–	Mar 5, 2026
Save Life	1	–	Mar 5, 2026
Scientia	1	–	Mar 5, 2026
SeaFood Company	1	–	Jun 16, 2026
Skyward	1	–	Jun 17, 2026
Snow Club	1	–	Jun 17, 2026
Snowy	1	–	Jun 17, 2026
Solaris	1	–	Mar 5, 2026
Sound \| Musical Instruments Online Store	1	–	Jan 22, 2026
Sounder	1	–	Mar 5, 2026
Spike	1	–	Jun 16, 2026
Tediss	1	–	Mar 5, 2026
Tennis Club	1	–	Mar 5, 2026
The Qlean	1	–	Mar 5, 2026
Tiger Claw	1	–	Mar 5, 2026
Tint	1	–	Feb 20, 2026
Top Dog	1	–	Jun 16, 2026
Translogic	1	–	Mar 5, 2026
Tuning	1	–	Mar 5, 2026
Vapester	1	–	Mar 5, 2026
Verse	1	–	Mar 5, 2026
Vixus	1	–	Mar 5, 2026
WealthCo	1	–	Mar 5, 2026
Wine House	1	–	Oct 10, 2026
Work & Travel Company	1	–	Mar 25, 2026
Yokoo	1	–	Feb 20, 2026
Yottis	1	–	Mar 5, 2026
Yungen	1	–	Mar 5, 2026
ZenSoul	1	–	Oct 23, 2026
Nelson	1	–	Mar 25, 2026
AirSupply	1	–	Jun 17, 2026
Aldo	1	–	Mar 5, 2026
Aqualots	1	–	Mar 5, 2026
Artrium	1	–	Mar 5, 2026
AutoParts	1	–	Jun 17, 2026
Bassein	1	–	Mar 5, 2026
Bazinga	1	–	Mar 5, 2026
Beacon	1	–	Mar 5, 2026
Berger	1	–	Mar 5, 2026
Buisson	1	–	Mar 25, 2026
Buzz Stone \| Magazine & Viral Blog WordPress Theme	1	–	Oct 10, 2026
Choreo	1	–	Jun 16, 2026
Chroma	1	–	Mar 5, 2026
Classter	1	–	Mar 5, 2026
Cobble	1	–	Feb 20, 2026
Coleo	1	–	Mar 5, 2026
ConFix	1	–	Mar 5, 2026
Contact Form 7 Multi-Step Addon	1	–	Jun 25, 2024
CopyPress	1	–	Jun 16, 2026
Corbesier	1	–	Jun 16, 2026
Craftis	1	–	Mar 5, 2026
Daiquiri	1	–	Mar 5, 2026
Dazzle	1	–	Jun 17, 2026
Deliciosa	1	–	Jun 16, 2026
Dentario	1	–	Mar 5, 2026
Dermatology Clinic	1	–	Mar 5, 2026
Dixon	1	–	Mar 5, 2026
Dom	1	–	Jun 16, 2026
Dr.Patterson	1	–	Mar 5, 2026
DroneX	1	–	Mar 5, 2026
EcoBlue	1	–	Jun 17, 2026
Edifice	1	–	Mar 5, 2026
Education Center \| LMS & Online Courses WordPress Theme	1	–	Jul 2, 2025
Eject	1	–	Mar 5, 2026
Equestrian Centre	1	–	Mar 5, 2026
Eros	1	–	Jun 16, 2026
Especio	1	–	Jun 16, 2026
Etude	1	–	Jun 17, 2026
Eventicity	1	–	Jun 17, 2026
Extreme Store	1	–	Feb 20, 2026
Food Drop	1	–	Jun 16, 2026

Exploited and recent CVEs

CVE-2026-119526 Critical 9.8 WordPress Royal Event theme <= 2.0 - PHP Object Injection vulnerability 0.4%
CVE-2026-62018 Critical 9.8 WordPress Gunslinger theme <= 1.11 - PHP Object Injection vulnerability 0.4%
CVE-2026-62017 Critical 9.8 WordPress Good Homes theme <= 1.3.13 - PHP Object Injection vulnerability 0.4%
CVE-2026-62016 Critical 9.8 WordPress Gamic theme <= 1.19 - PHP Object Injection vulnerability 0.4%
CVE-2026-62015 Critical 9.8 WordPress Gamezone theme <= 1.1.11 - PHP Object Injection vulnerability 0.4%
CVE-2026-62014 Critical 9.8 WordPress EmojiNation theme <= 1.0.12 - PHP Object Injection vulnerability 0.4%
CVE-2026-62013 Critical 9.8 WordPress Edge Decor theme <= 2.9 - PHP Object Injection vulnerability 0.4%
CVE-2026-62012 Critical 9.8 WordPress Coinpress theme <= 1.0.15 - PHP Object Injection vulnerability 0.4%
CVE-2026-62011 Critical 9.8 WordPress Bonbon theme <= 1.11 - PHP Object Injection vulnerability 0.4%
CVE-2026-62010 Critical 9.8 WordPress Avventure theme <= 1.1.12 - PHP Object Injection vulnerability 0.4%
CVE-2026-62009 Critical 9.8 WordPress Filmax theme <= 1.1.11 - PHP Object Injection vulnerability 0.4%
CVE-2026-62008 Critical 9.8 WordPress Orpheus theme <= 1.8 - PHP Object Injection vulnerability 0.4%
CVE-2026-62006 Critical 9.8 WordPress Nuts theme <= 1.12 - PHP Object Injection vulnerability 0.4%
CVE-2026-62005 Critical 9.8 WordPress Muzicon theme <= 1.15 - PHP Object Injection vulnerability 0.4%
CVE-2026-62004 Critical 9.8 WordPress Motorix theme <= 1.11 - PHP Object Injection vulnerability 0.4%
CVE-2026-62003 Critical 9.8 WordPress Mission theme <= 1.22 - PHP Object Injection vulnerability 0.4%
CVE-2026-62002 Critical 9.8 WordPress Meals & Wheels theme <= 1.1.13 - PHP Object Injection vulnerability 0.5%
CVE-2026-62001 Critical 9.8 WordPress Marcell theme <= 1.2.14 - PHP Object Injection vulnerability 0.5%
CVE-2026-61998 Critical 9.8 WordPress Le Truffe theme <= 1.1.7 - PHP Object Injection vulnerability 0.5%
CVE-2026-61997 Critical 9.8 WordPress Legal Stone theme <= 1.2.11 - PHP Object Injection vulnerability 0.5%
CVE-2026-54860 Critical 9.8 WordPress Ozisti theme <= 1.1.10 - PHP Object Injection vulnerability 0.5%
CVE-2026-54859 Critical 9.8 WordPress Preservation theme <= 1.15 - PHP Object Injection vulnerability 0.5%
CVE-2026-54858 Critical 9.8 WordPress Printy theme <= 1.13.0 - PHP Object Injection vulnerability 0.5%
CVE-2026-54857 Critical 9.8 WordPress Quirky theme <= 1.23 - PHP Object Injection vulnerability 0.5%
CVE-2026-54856 Critical 9.8 WordPress RexCoin theme <= 1.2.6 - PHP Object Injection vulnerability 0.5%
CVE-2026-112847 Critical 9.8 WordPress ZenSoul theme <= 1.13 - PHP Object Injection vulnerability 0.3%
CVE-2026-81797 Critical 9.8 WordPress Buzz Stone | Magazine & Viral Blog WordPress Theme theme <= 1.0.2 - PHP Object Injection vulnerability 0.3%
CVE-2026-78535 Critical 9.8 WordPress Photolia theme <= 1.0.3 - PHP Object Injection vulnerability 0.3%
CVE-2026-78531 Critical 9.8 WordPress Jacqueline theme <= 2.22 - PHP Object Injection vulnerability 0.3%
CVE-2026-78529 Critical 9.8 WordPress Alliance theme <= 3.11 - PHP Object Injection vulnerability 0.3%

TThemeREX

Products

Exploited and recent CVEs

ThemeREX