Themerex Group vulnerabilities
29 CVEs and advisories name Themerex Group as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-112846WordPress Save Life theme <= 1.2.14 - PHP Object Injection vulnerability
- CVE-2026-112851WordPress HotLock theme <= 1.3.9 - PHP Object Injection vulnerability
- CVE-2026-112852WordPress Helion theme <= 1.1.12 - PHP Object Injection vulnerability
- CVE-2026-112856WordPress Vagabonds theme <= 1.3.10 - PHP Object Injection vulnerability
- CVE-2026-112859WordPress Little Birdies theme <= 1.3.16 - PHP Object Injection vulnerability
- CVE-2026-57742WordPress Kids Planet theme <= 2.2.14.2 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-62045WordPress Booklovers theme <= 2.13.0 - PHP Object Injection vulnerability
- CVE-2026-62046WordPress Gutentype theme <= 2.1.12 - PHP Object Injection vulnerability
- CVE-2026-93944WordPress Camelia theme <= 1.2.15 - PHP Object Injection vulnerability
- CVE-2026-93943WordPress Convex theme <= 1.16.0 - PHP Object Injection vulnerability
- CVE-2026-93942WordPress Dwell theme <= 1.16.0 - PHP Object Injection vulnerability
- CVE-2026-93941WordPress Edema theme <= 1.2.2.2 - PHP Object Injection vulnerability
- CVE-2026-93940WordPress Greeny theme <= 2.10.0 - PHP Object Injection vulnerability
- CVE-2026-93938WordPress Hogwords theme <= 1.2.7 - PHP Object Injection vulnerability
- CVE-2026-93937WordPress Hygia theme <= 1.21.0 - PHP Object Injection vulnerability
- CVE-2026-93936WordPress IPharm theme <= 1.2.4 - PHP Object Injection vulnerability
- CVE-2026-93935WordPress Let's Play theme <= 1.1.15 - PHP Object Injection vulnerability
- CVE-2026-93934WordPress Partiso theme <= 1.1.13 - PHP Object Injection vulnerability
- CVE-2026-93933WordPress Rosalinda theme <= 1.2.4 - PHP Object Injection vulnerability
- CVE-2026-93932WordPress Smart Casa theme <= 1.0.12 - PHP Object Injection vulnerability
- CVE-2026-93931WordPress Smash theme <= 1.12.0 - PHP Object Injection vulnerability
- CVE-2026-93930WordPress Tantra theme <= 2.9.0 - PHP Object Injection vulnerability
- CVE-2026-93929WordPress Travesia theme <= 1.1.16 - PHP Object Injection vulnerability
- CVE-2026-102797WordPress ThemeREX Addons plugin <= 2.46.0 - Server Side Request Forgery (SSRF) vulnerability
- CVE-2026-102798WordPress ThemeREX Addons plugin <= 2.46.0 - Cross Site Scripting (XSS) vulnerability
- CVE-2025-60205WordPress ThemeREX Addons plugin <= 2.36.1.1 - PHP Object Injection vulnerability
- CVE-2026-39529WordPress Elementra theme <= 1.0.9 - PHP Object Injection vulnerability
- CVE-2025-60085WordPress Learnify theme <= 1.15.0 - Local File Inclusion vulnerability
- CVE-2025-58924WordPress Geya theme <= 1.15 - Local File Inclusion vulnerability