# cve.now: Themerex

The newest entries naming Themerex as an affected vendor (up to 200), of 236 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-119526](https://cve.now/CVE-2026-119526.md): WordPress Royal Event theme \<= 2.0 - PHP Object Injection vulnerability (CVSS 9.8)
- [CVE-2026-62018](https://cve.now/CVE-2026-62018.md): WordPress Gunslinger theme \<= 1.11 - PHP Object Injection vulnerability (CVSS 9.8)
- [CVE-2026-62017](https://cve.now/CVE-2026-62017.md): WordPress Good Homes theme \<= 1.3.13 - PHP Object Injection vulnerability (CVSS 9.8)
- [CVE-2026-62016](https://cve.now/CVE-2026-62016.md): WordPress Gamic theme \<= 1.19 - PHP Object Injection vulnerability (CVSS 9.8)
- [CVE-2026-62015](https://cve.now/CVE-2026-62015.md): WordPress Gamezone theme \<= 1.1.11 - PHP Object Injection vulnerability (CVSS 9.8)
- [CVE-2026-62014](https://cve.now/CVE-2026-62014.md): WordPress EmojiNation theme \<= 1.0.12 - PHP Object Injection vulnerability (CVSS 9.8)
- [CVE-2026-62013](https://cve.now/CVE-2026-62013.md): WordPress Edge Decor theme \<= 2.9 - PHP Object Injection vulnerability (CVSS 9.8)
- [CVE-2026-62012](https://cve.now/CVE-2026-62012.md): WordPress Coinpress theme \<= 1.0.15 - PHP Object Injection vulnerability (CVSS 9.8)
- [CVE-2026-62011](https://cve.now/CVE-2026-62011.md): WordPress Bonbon theme \<= 1.11 - PHP Object Injection vulnerability (CVSS 9.8)
- [CVE-2026-62010](https://cve.now/CVE-2026-62010.md): WordPress Avventure theme \<= 1.1.12 - PHP Object Injection vulnerability (CVSS 9.8)
- [CVE-2026-62009](https://cve.now/CVE-2026-62009.md): WordPress Filmax theme \<= 1.1.11 - PHP Object Injection vulnerability (CVSS 9.8)
- [CVE-2026-62008](https://cve.now/CVE-2026-62008.md): WordPress Orpheus theme \<= 1.8 - PHP Object Injection vulnerability (CVSS 9.8)
- [CVE-2026-62006](https://cve.now/CVE-2026-62006.md): WordPress Nuts theme \<= 1.12 - PHP Object Injection vulnerability (CVSS 9.8)
- [CVE-2026-62005](https://cve.now/CVE-2026-62005.md): WordPress Muzicon theme \<= 1.15 - PHP Object Injection vulnerability (CVSS 9.8)
- [CVE-2026-62004](https://cve.now/CVE-2026-62004.md): WordPress Motorix theme \<= 1.11 - PHP Object Injection vulnerability (CVSS 9.8)
- [CVE-2026-62003](https://cve.now/CVE-2026-62003.md): WordPress Mission theme \<= 1.22 - PHP Object Injection vulnerability (CVSS 9.8)
- [CVE-2026-62002](https://cve.now/CVE-2026-62002.md): WordPress Meals & Wheels theme \<= 1.1.13 - PHP Object Injection vulnerability (CVSS 9.8)
- [CVE-2026-62001](https://cve.now/CVE-2026-62001.md): WordPress Marcell theme \<= 1.2.14 - PHP Object Injection vulnerability (CVSS 9.8)
- [CVE-2026-61998](https://cve.now/CVE-2026-61998.md): WordPress Le Truffe theme \<= 1.1.7 - PHP Object Injection vulnerability (CVSS 9.8)
- [CVE-2026-61997](https://cve.now/CVE-2026-61997.md): WordPress Legal Stone theme \<= 1.2.11 - PHP Object Injection vulnerability (CVSS 9.8)
- [CVE-2026-54860](https://cve.now/CVE-2026-54860.md): WordPress Ozisti theme \<= 1.1.10 - PHP Object Injection vulnerability (CVSS 9.8)
- [CVE-2026-54859](https://cve.now/CVE-2026-54859.md): WordPress Preservation theme \<= 1.15 - PHP Object Injection vulnerability (CVSS 9.8)
- [CVE-2026-54858](https://cve.now/CVE-2026-54858.md): WordPress Printy theme \<= 1.13.0 - PHP Object Injection vulnerability (CVSS 9.8)
- [CVE-2026-54857](https://cve.now/CVE-2026-54857.md): WordPress Quirky theme \<= 1.23 - PHP Object Injection vulnerability (CVSS 9.8)
- [CVE-2026-54856](https://cve.now/CVE-2026-54856.md): WordPress RexCoin theme \<= 1.2.6 - PHP Object Injection vulnerability (CVSS 9.8)
- [CVE-2026-112847](https://cve.now/CVE-2026-112847.md): WordPress ZenSoul theme \<= 1.13 - PHP Object Injection vulnerability (CVSS 9.8)
- [CVE-2026-81797](https://cve.now/CVE-2026-81797.md): WordPress Buzz Stone | Magazine & Viral Blog WordPress Theme theme \<= 1.0.2 - PHP Object Injection vulnerability (CVSS 9.8)
- [CVE-2026-78535](https://cve.now/CVE-2026-78535.md): WordPress Photolia theme \<= 1.0.3 - PHP Object Injection vulnerability (CVSS 9.8)
- [CVE-2026-78531](https://cve.now/CVE-2026-78531.md): WordPress Jacqueline theme \<= 2.22 - PHP Object Injection vulnerability (CVSS 9.8)
- [CVE-2026-78529](https://cve.now/CVE-2026-78529.md): WordPress Alliance theme \<= 3.11 - PHP Object Injection vulnerability (CVSS 9.8)
- [CVE-2026-66564](https://cve.now/CVE-2026-66564.md): WordPress ShiftCV theme \<= 3.0.14 - PHP Object Injection vulnerability (CVSS 9.8)
- [CVE-2026-66563](https://cve.now/CVE-2026-66563.md): WordPress Windsor theme \<= 2.10 - PHP Object Injection vulnerability (CVSS 9.8)
- [CVE-2026-66483](https://cve.now/CVE-2026-66483.md): WordPress Education Center theme \<= 3.6.12 - PHP Object Injection vulnerability (CVSS 9.8)
- [CVE-2026-62125](https://cve.now/CVE-2026-62125.md): WordPress Asia Garden theme \<= 1.3.1 - PHP Object Injection vulnerability (CVSS 9.8)
- [CVE-2026-62124](https://cve.now/CVE-2026-62124.md): WordPress N7 | Golf Club Sports & Events theme \<= 2.21 - PHP Object Injection vulnerability (CVSS 9.8)
- [CVE-2026-62123](https://cve.now/CVE-2026-62123.md): WordPress Invetex theme \<= 2.18 - PHP Object Injection vulnerability (CVSS 9.8)
- [CVE-2026-62120](https://cve.now/CVE-2026-62120.md): WordPress Law Office theme \<= 3.20 - PHP Object Injection vulnerability (CVSS 9.8)
- [CVE-2026-62090](https://cve.now/CVE-2026-62090.md): WordPress WineShop theme \<= 3.20 - PHP Object Injection vulnerability (CVSS 9.8)
- [CVE-2026-62087](https://cve.now/CVE-2026-62087.md): WordPress Equadio theme \<= 1.1.4 - PHP Object Injection vulnerability (CVSS 9.8)
- [CVE-2026-62086](https://cve.now/CVE-2026-62086.md): WordPress Juno theme \<= 2.25 - PHP Object Injection vulnerability (CVSS 9.8)
- [CVE-2026-62074](https://cve.now/CVE-2026-62074.md): WordPress Ozeum theme \<= 1.3.0 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-62054](https://cve.now/CVE-2026-62054.md): WordPress Yacht Rental theme \<= 2.6 - PHP Object Injection vulnerability (CVSS 9.8)
- [CVE-2026-62053](https://cve.now/CVE-2026-62053.md): WordPress Wine House theme \<= 3.20 - PHP Object Injection vulnerability (CVSS 9.8)
- [CVE-2026-62052](https://cve.now/CVE-2026-62052.md): WordPress Tipsy theme \<= 1.6 - PHP Object Injection vulnerability (CVSS 9.8)
- [CVE-2026-62051](https://cve.now/CVE-2026-62051.md): WordPress Stargaze theme \<= 1.10 - PHP Object Injection vulnerability (CVSS 9.8)
- [CVE-2026-62050](https://cve.now/CVE-2026-62050.md): WordPress Splendour theme \<= 1.23 - PHP Object Injection vulnerability (CVSS 9.8)
- [CVE-2026-94063](https://cve.now/CVE-2026-94063.md): WordPress Education Center theme \<= 3.6.12 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
- [CVE-2026-97236](https://cve.now/CVE-2026-97236.md): WordPress ThemeREX Addons plugin \< 2.45.0 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
- [CVE-2026-97235](https://cve.now/CVE-2026-97235.md): WordPress ThemeREX Addons plugin \< 2.45.0 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
- [CVE-2026-62105](https://cve.now/CVE-2026-62105.md): WordPress ThemeREX Addons plugin \< 2.45.0 - PHP Object Injection vulnerability (CVSS 9.8)
- [CVE-2026-65573](https://cve.now/CVE-2026-65573.md): WordPress Abelle theme \<= 1.22 - PHP Object Injection vulnerability (CVSS 9.8)
- [CVE-2026-57747](https://cve.now/CVE-2026-57747.md): WordPress Booked plugin \<= 3.0.0 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 6.5)
- [CVE-2026-57746](https://cve.now/CVE-2026-57746.md): WordPress Booked plugin \<= 3.0.0 - Broken Access Control vulnerability (CVSS 7.1)
- [CVE-2025-69175](https://cve.now/CVE-2025-69175.md): WordPress Line Agency theme \<= 1.3.1 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-69174](https://cve.now/CVE-2025-69174.md): WordPress Etude theme \<= 1.6 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-69170](https://cve.now/CVE-2025-69170.md): WordPress Eventicity theme \<= 1.5 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-69166](https://cve.now/CVE-2025-69166.md): WordPress Gunslinger theme \<= 1.7 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-69164](https://cve.now/CVE-2025-69164.md): WordPress Skyward theme \<= 1.10 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-69158](https://cve.now/CVE-2025-69158.md): WordPress Granola theme \<= 1.13 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-69157](https://cve.now/CVE-2025-69157.md): WordPress Gamic theme \<= 1.15 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-69144](https://cve.now/CVE-2025-69144.md): WordPress Preservation theme \<= 1.10 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-69127](https://cve.now/CVE-2025-69127.md): WordPress Plumbing theme \<= 1.6 - PHP Object Injection vulnerability (CVSS 9.8)
- [CVE-2025-69126](https://cve.now/CVE-2025-69126.md): WordPress Fortius theme \<= 2.3.0 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-69123](https://cve.now/CVE-2025-69123.md): WordPress Snow Club theme \<= 1.1 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-69120](https://cve.now/CVE-2025-69120.md): WordPress Dazzle theme \<= 1.0.0 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-69115](https://cve.now/CVE-2025-69115.md): WordPress LuxMed | Medicine & Healthcare Doctor WordPress Theme theme \<= 1.2.2 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-69111](https://cve.now/CVE-2025-69111.md): WordPress Reisen theme \<= 1.4.1 - PHP Object Injection vulnerability (CVSS 9.8)
- [CVE-2025-69106](https://cve.now/CVE-2025-69106.md): WordPress Imba theme \<= 1.5.0 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-22338](https://cve.now/CVE-2026-22338.md): WordPress EcoBlue theme \<= 1.15 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-22331](https://cve.now/CVE-2026-22331.md): WordPress AutoParts theme \<= 1.5.8 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-69173](https://cve.now/CVE-2025-69173.md): WordPress Tipsy theme \<= 1.1 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-69172](https://cve.now/CVE-2025-69172.md): WordPress Resurs theme \<= 1.3 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-69171](https://cve.now/CVE-2025-69171.md): WordPress Orpheus theme \<= 1.3 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-69161](https://cve.now/CVE-2025-69161.md): WordPress Snowy theme \<= 1.13 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-69148](https://cve.now/CVE-2025-69148.md): WordPress Quirky theme \<= 1.23 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-69145](https://cve.now/CVE-2025-69145.md): WordPress Gat theme \<= 1.16 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-69117](https://cve.now/CVE-2025-69117.md): WordPress Ingenioso theme \<= 1.14.0 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-69110](https://cve.now/CVE-2025-69110.md): WordPress AirSupply theme \<= 2.0.0 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-58954](https://cve.now/CVE-2025-58954.md): WordPress HomeRoofer theme \<= 2.11.0 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-58953](https://cve.now/CVE-2025-58953.md): WordPress Joly theme \<= 1.22.0 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-58952](https://cve.now/CVE-2025-58952.md): WordPress Neuronet theme \< 1.14.0 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-69176](https://cve.now/CVE-2025-69176.md): WordPress ITactics theme \<= 1.0 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-69168](https://cve.now/CVE-2025-69168.md): WordPress Spike theme \<= 1.2 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-69167](https://cve.now/CVE-2025-69167.md): WordPress Eros theme \<= 1.3 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-69165](https://cve.now/CVE-2025-69165.md): WordPress Choreo theme \<= 1.6 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-69163](https://cve.now/CVE-2025-69163.md): WordPress WineShop theme \<= 3.17 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-69162](https://cve.now/CVE-2025-69162.md): WordPress Grecko theme \<= 5.17 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-69160](https://cve.now/CVE-2025-69160.md): WordPress Gita theme \<= 1.11 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-69159](https://cve.now/CVE-2025-69159.md): WordPress Printo theme \<= 1.11 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-69150](https://cve.now/CVE-2025-69150.md): WordPress Medeus theme \<= 1.14 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-69149](https://cve.now/CVE-2025-69149.md): WordPress Top Dog theme \<= 1.0.5 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-69147](https://cve.now/CVE-2025-69147.md): WordPress Putter theme \<= 1.17 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-69146](https://cve.now/CVE-2025-69146.md): WordPress Dom theme \<= 1.24 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-69143](https://cve.now/CVE-2025-69143.md): WordPress Mission theme \<= 1.22 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-69142](https://cve.now/CVE-2025-69142.md): WordPress Abelle theme \<= 1.22 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-69141](https://cve.now/CVE-2025-69141.md): WordPress Kelly Young theme \<= 1.1.0 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-69125](https://cve.now/CVE-2025-69125.md): WordPress Food Drop theme \<= 1.3 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-69124](https://cve.now/CVE-2025-69124.md): WordPress Especio theme \<= 1.0 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-69122](https://cve.now/CVE-2025-69122.md): WordPress SeaFood Company theme \<= 1.4 - PHP Object Injection vulnerability (CVSS 9.8)
- [CVE-2025-69121](https://cve.now/CVE-2025-69121.md): WordPress Deliciosa theme \<= 1.10.0 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-69119](https://cve.now/CVE-2025-69119.md): WordPress Corbesier theme \<= 1.15.0 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-69118](https://cve.now/CVE-2025-69118.md): WordPress CopyPress theme \<= 1.4.5 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-69116](https://cve.now/CVE-2025-69116.md): WordPress Iona theme \<= 1.0.8 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-69114](https://cve.now/CVE-2025-69114.md): WordPress MaxiNet theme \<= 1.2.10 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-69113](https://cve.now/CVE-2025-69113.md): WordPress Nexio theme \<= 1.10.0 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-69112](https://cve.now/CVE-2025-69112.md): WordPress Planty theme \<= 1.14.0 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-69109](https://cve.now/CVE-2025-69109.md): WordPress Raider Spirit theme \<= 1.1.2 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-69108](https://cve.now/CVE-2025-69108.md): WordPress Hot Coffee theme \<= 1.7 - PHP Object Injection vulnerability (CVSS 9.8)
- [CVE-2025-69107](https://cve.now/CVE-2025-69107.md): WordPress Rosaleen theme \<= 2.8 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-69105](https://cve.now/CVE-2025-69105.md): WordPress Modernee theme \<= 1.6.0 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-27084](https://cve.now/CVE-2026-27084.md): WordPress Buisson theme \<= 1.1.11 - PHP Object Injection vulnerability (CVSS 9.8)
- [CVE-2026-27083](https://cve.now/CVE-2026-27083.md): WordPress Work & Travel Company theme \<= 1.2 - PHP Object Injection vulnerability (CVSS 9.8)
- [CVE-2026-27082](https://cve.now/CVE-2026-27082.md): WordPress Love Story theme \<= 1.3.12 - PHP Object Injection vulnerability (CVSS 9.8)
- [CVE-2026-22504](https://cve.now/CVE-2026-22504.md): WordPress ProLingua theme \<= 1.1.12 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-22503](https://cve.now/CVE-2026-22503.md): WordPress Nelson theme \<= 1.2.0 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-22494](https://cve.now/CVE-2026-22494.md): WordPress Good Homes theme \<= 1.3.13 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-22324](https://cve.now/CVE-2026-22324.md): WordPress Melania theme \<= 2.5.0 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-28128](https://cve.now/CVE-2026-28128.md): WordPress Verse theme \<= 1.7.0 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-28120](https://cve.now/CVE-2026-28120.md): WordPress Dr.Patterson theme \<= 1.3.2 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-28107](https://cve.now/CVE-2026-28107.md): WordPress Muzicon theme \<= 1.9.0 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-28105](https://cve.now/CVE-2026-28105.md): WordPress Good Energy theme \<= 1.7.7 - PHP Object Injection vulnerability (CVSS 9.8)
- [CVE-2026-28098](https://cve.now/CVE-2026-28098.md): WordPress Save Life theme \<= 1.2.13 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-28097](https://cve.now/CVE-2026-28097.md): WordPress Artrium theme \<= 1.0.14 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-28096](https://cve.now/CVE-2026-28096.md): WordPress WealthCo theme \<= 2.18 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-28095](https://cve.now/CVE-2026-28095.md): WordPress Marcell theme \<= 1.2.14 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-28094](https://cve.now/CVE-2026-28094.md): WordPress RexCoin theme \<= 1.2.6 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-28093](https://cve.now/CVE-2026-28093.md): WordPress Ozisti theme \<= 1.1.10 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-28092](https://cve.now/CVE-2026-28092.md): WordPress Sounder theme \<= 1.3.11 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-28091](https://cve.now/CVE-2026-28091.md): WordPress Coleo theme \<= 1.1.7 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-28090](https://cve.now/CVE-2026-28090.md): WordPress Gamezone theme \<= 1.1.11 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-28089](https://cve.now/CVE-2026-28089.md): WordPress Daiquiri theme \<= 1.2.4 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-28088](https://cve.now/CVE-2026-28088.md): WordPress Aqualots theme \<= 1.1.6 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-28087](https://cve.now/CVE-2026-28087.md): WordPress Filmax theme \<= 1.1.11 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-28086](https://cve.now/CVE-2026-28086.md): WordPress Run Gran theme \<= 2.0 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-28085](https://cve.now/CVE-2026-28085.md): WordPress Mahogany theme \<= 2.9 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-28084](https://cve.now/CVE-2026-28084.md): WordPress Bazinga theme \<= 1.1.9 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-28081](https://cve.now/CVE-2026-28081.md): WordPress Windsor theme \<= 2.5.0 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-28077](https://cve.now/CVE-2026-28077.md): WordPress Vapester theme \<= 1.1.10 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-28074](https://cve.now/CVE-2026-28074.md): WordPress Pizza House theme \<= 1.4.0 - PHP Object Injection vulnerability (CVSS 9.8)
- [CVE-2026-28069](https://cve.now/CVE-2026-28069.md): WordPress Le Truffe theme \<= 1.1.7 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-28068](https://cve.now/CVE-2026-28068.md): WordPress Rhythmo theme \<= 1.3.4 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-28067](https://cve.now/CVE-2026-28067.md): WordPress Bassein theme \<= 1.0.15 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-28066](https://cve.now/CVE-2026-28066.md): WordPress Legrand theme \<= 2.17 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-28065](https://cve.now/CVE-2026-28065.md): WordPress Eject theme \<= 2.17 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-28064](https://cve.now/CVE-2026-28064.md): WordPress Edge Decor theme \<= 2.2 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-28063](https://cve.now/CVE-2026-28063.md): WordPress Asia Garden theme \<= 1.3.1 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-28062](https://cve.now/CVE-2026-28062.md): WordPress Happy Baby theme \<= 1.2.12 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-28061](https://cve.now/CVE-2026-28061.md): WordPress Tiger Claw theme \<= 1.1.14 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-28060](https://cve.now/CVE-2026-28060.md): WordPress S.King theme \<= 1.5.3 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-28059](https://cve.now/CVE-2026-28059.md): WordPress Dermatology Clinic theme \<= 1.4.3 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-28058](https://cve.now/CVE-2026-28058.md): WordPress Dixon theme \<= 1.4.2.1 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-28057](https://cve.now/CVE-2026-28057.md): WordPress Mandala theme \<= 2.8 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-28056](https://cve.now/CVE-2026-28056.md): WordPress MCKinney's Politics theme \<= 1.2.8 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-28055](https://cve.now/CVE-2026-28055.md): WordPress M.Williamson theme \<= 1.2.11 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-28054](https://cve.now/CVE-2026-28054.md): WordPress Legal Stone theme \<= 1.2.11 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-28053](https://cve.now/CVE-2026-28053.md): WordPress Miller theme \<= 1.3.3 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-28052](https://cve.now/CVE-2026-28052.md): WordPress Peter Mason theme \<= 1.4.5 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-28051](https://cve.now/CVE-2026-28051.md): WordPress Yacht Rental theme \<= 2.6 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-28050](https://cve.now/CVE-2026-28050.md): WordPress Beacon theme \<= 2.24 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-28049](https://cve.now/CVE-2026-28049.md): WordPress Police Department theme \<= 2.17 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-28046](https://cve.now/CVE-2026-28046.md): WordPress Law Office theme \<= 3.3.0 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-28045](https://cve.now/CVE-2026-28045.md): WordPress N7 | Golf Club Sports & Events theme \<= 2.16.0 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-28043](https://cve.now/CVE-2026-28043.md): WordPress Healer - Doctor, Clinic & Medical WordPress Theme theme \<= 1.0.0 - Local File Inclusion vulnerability (CVSS 9.8)
- [CVE-2026-28035](https://cve.now/CVE-2026-28035.md): WordPress Printy theme \<= 1.8 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-28034](https://cve.now/CVE-2026-28034.md): WordPress Progress theme \<= 1.2 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-28033](https://cve.now/CVE-2026-28033.md): WordPress Edifice theme \<= 1.8 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-28032](https://cve.now/CVE-2026-28032.md): WordPress Tuning theme \<= 1.3 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-28031](https://cve.now/CVE-2026-28031.md): WordPress Invetex theme \<= 2.18 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-28030](https://cve.now/CVE-2026-28030.md): WordPress Bonbon theme \<= 1.6 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-28029](https://cve.now/CVE-2026-28029.md): WordPress EmojiNation theme \<= 1.0.12 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-28028](https://cve.now/CVE-2026-28028.md): WordPress MoneyFlow theme \<= 1.0 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-28027](https://cve.now/CVE-2026-28027.md): WordPress Kayon theme \<= 1.3 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-28026](https://cve.now/CVE-2026-28026.md): WordPress Motorix theme \<= 1.6 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-28025](https://cve.now/CVE-2026-28025.md): WordPress Stargaze theme \<= 1.5 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-28023](https://cve.now/CVE-2026-28023.md): WordPress Nuts theme \<= 1.10 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-28022](https://cve.now/CVE-2026-28022.md): WordPress Foodie theme \<= 1.14 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-28021](https://cve.now/CVE-2026-28021.md): WordPress Craftis theme \<= 1.2.8 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-28020](https://cve.now/CVE-2026-28020.md): WordPress Chroma theme \<= 1.11 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-28019](https://cve.now/CVE-2026-28019.md): WordPress Manoir theme \<= 1.11 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-28018](https://cve.now/CVE-2026-28018.md): WordPress Global Logistics theme \<= 3.20 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-28017](https://cve.now/CVE-2026-28017.md): WordPress Green Thumb theme \<= 1.1.12 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-28016](https://cve.now/CVE-2026-28016.md): WordPress Luxury Wine theme \<= 1.1.14 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-28015](https://cve.now/CVE-2026-28015.md): WordPress ShiftCV theme \<= 3.0.14 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-28014](https://cve.now/CVE-2026-28014.md): WordPress Translogic theme \<= 1.2.11 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-28013](https://cve.now/CVE-2026-28013.md): WordPress Kratz theme \<= 1.0.12 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-28012](https://cve.now/CVE-2026-28012.md): WordPress Gridiron theme \<= 1.0.14 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-28011](https://cve.now/CVE-2026-28011.md): WordPress Yottis theme \<= 1.0.10 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-28010](https://cve.now/CVE-2026-28010.md): WordPress Scientia theme \<= 1.2.4 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-28009](https://cve.now/CVE-2026-28009.md): WordPress DroneX theme \<= 1.1.12 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-28007](https://cve.now/CVE-2026-28007.md): WordPress Coinpress theme \<= 1.0.14 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-28006](https://cve.now/CVE-2026-28006.md): WordPress Yungen theme \<= 1.0.12 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-27998](https://cve.now/CVE-2026-27998.md): WordPress Vixus theme \<= 1.0.16 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-27997](https://cve.now/CVE-2026-27997.md): WordPress Maxify theme \<= 1.0.16 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-27996](https://cve.now/CVE-2026-27996.md): WordPress Lingvico theme \<= 1.0.14 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-27995](https://cve.now/CVE-2026-27995.md): WordPress Justitia theme \<= 1.1.0 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-27994](https://cve.now/CVE-2026-27994.md): WordPress Tediss theme \<= 1.2.4 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-27993](https://cve.now/CVE-2026-27993.md): WordPress Aldo theme \<= 1.0.10 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-27992](https://cve.now/CVE-2026-27992.md): WordPress Meals & Wheels theme \<= 1.1.12 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-27991](https://cve.now/CVE-2026-27991.md): WordPress Avventure theme \<= 1.1.12 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-27990](https://cve.now/CVE-2026-27990.md): WordPress ConFix theme \<= 1.013 - Local File Inclusion vulnerability (CVSS 8.1)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/themerex
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.