Where
-Infinity
0

Trending

Last week
Last month
Last year

Vendor Risk Score

See how themerex group compares to other vendors in security performance

View Risk Score →

ThemeREX Group Save LifeWordPress Save Life theme <= 1.2.14 - PHP Object Injection vulnerability

Risk 86
Severity
9.8
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Deserialization of Untrusted Data vulnerability in ThemeREX Group Save Life save-life allows Object Injection.This issue affects Save Life: from n/a through 1.2.14.

First published (updated )
CVE-2026-112846

ThemeREX Group HotLockWordPress HotLock theme <= 1.3.9 - PHP Object Injection vulnerability

Risk 86
Severity
9.8
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Deserialization of Untrusted Data vulnerability in ThemeREX Group HotLock hotlock allows Object Injection.This issue affects HotLock: from n/a through 1.3.9.

First published (updated )
CVE-2026-112851

ThemeREX Group HelionWordPress Helion theme <= 1.1.12 - PHP Object Injection vulnerability

Risk 75
Severity
8.1
AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Deserialization of Untrusted Data vulnerability in ThemeREX Group Helion helion allows Object Injection.This issue affects Helion: from n/a through 1.1.12.

First published (updated )
CVE-2026-112852

ThemeREX Group VagabondsWordPress Vagabonds theme <= 1.3.10 - PHP Object Injection vulnerability

Risk 86
Severity
9.8
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Deserialization of Untrusted Data vulnerability in ThemeREX Group Vagabonds vagabonds allows Object Injection.This issue affects Vagabonds: from n/a through 1.3.10.

First published (updated )
CVE-2026-112856

ThemeREX Group Little BirdiesWordPress Little Birdies theme <= 1.3.16 - PHP Object Injection vulnerability

Risk 86
Severity
9.8
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Deserialization of Untrusted Data vulnerability in ThemeREX Group Little Birdies little-birdies allows Object Injection.This issue affects Little Birdies: from n/a through 1.3.16.

First published (updated )
CVE-2026-112859

ThemeREX Group Kids PlanetWordPress Kids Planet theme <= 2.2.14.2 - Cross Site Scripting (XSS) vulnerability

Risk 50
Severity
7.1
XSS
AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeREX Group Kids Planet allows Reflected XSS.

This issue affects Kids Planet: from n/a through 2.2.14.2.

First published (updated )
CVE-2026-57742

ThemeREX Group BookloversWordPress Booklovers theme <= 2.13.0 - PHP Object Injection vulnerability

Risk 86
Severity
9.8
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Deserialization of Untrusted Data vulnerability in ThemeREX Group Booklovers booklovers allows Object Injection.This issue affects Booklovers: from n/a through 2.13.0.

First published (updated )
CVE-2026-62045

ThemeREX Group GutentypeWordPress Gutentype theme <= 2.1.12 - PHP Object Injection vulnerability

Risk 86
Severity
9.8
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Deserialization of Untrusted Data vulnerability in ThemeREX Group Gutentype gutentype allows Object Injection.This issue affects Gutentype: from n/a through 2.1.12.

First published (updated )
CVE-2026-62046

ThemeREX Group CameliaWordPress Camelia theme <= 1.2.15 - PHP Object Injection vulnerability

Risk 86
Severity
9.8
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Deserialization of Untrusted Data vulnerability in ThemeREX Group Camelia camelia allows Object Injection.This issue affects Camelia: from n/a through 1.2.15.

First published (updated )
CVE-2026-93944

ThemeREX Group DwellWordPress Dwell theme <= 1.16.0 - PHP Object Injection vulnerability

Risk 86
Severity
9.8
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Deserialization of Untrusted Data vulnerability in ThemeREX Group Dwell dwell allows Object Injection.This issue affects Dwell: from n/a through 1.16.0.

First published (updated )
CVE-2026-93942

ThemeREX Group ConvexWordPress Convex theme <= 1.16.0 - PHP Object Injection vulnerability

Risk 86
Severity
9.8
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Deserialization of Untrusted Data vulnerability in ThemeREX Group Convex convex allows Object Injection.This issue affects Convex: from n/a through 1.16.0.

First published (updated )
CVE-2026-93943

ThemeREX Group HogwordsWordPress Hogwords theme <= 1.2.7 - PHP Object Injection vulnerability

Risk 86
Severity
9.8
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Deserialization of Untrusted Data vulnerability in ThemeREX Group Hogwords hogwords allows Object Injection.This issue affects Hogwords: from n/a through 1.2.7.

First published (updated )
CVE-2026-93938

ThemeREX Group HygiaWordPress Hygia theme <= 1.21.0 - PHP Object Injection vulnerability

Risk 86
Severity
9.8
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Deserialization of Untrusted Data vulnerability in ThemeREX Group Hygia hygia allows Object Injection.This issue affects Hygia: from n/a through 1.21.0.

First published (updated )
CVE-2026-93937

ThemeREX Group GreenyWordPress Greeny theme <= 2.10.0 - PHP Object Injection vulnerability

Risk 86
Severity
9.8
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Deserialization of Untrusted Data vulnerability in ThemeREX Group Greeny greeny allows Object Injection.This issue affects Greeny: from n/a through 2.10.0.

First published (updated )
CVE-2026-93940

ThemeREX Group EdemaWordPress Edema theme <= 1.2.2.2 - PHP Object Injection vulnerability

Risk 86
Severity
9.8
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Deserialization of Untrusted Data vulnerability in ThemeREX Group Edema edema allows Object Injection.This issue affects Edema: from n/a through 1.2.2.2.

First published (updated )
CVE-2026-93941

ThemeREX Group PartisoWordPress Partiso theme <= 1.1.13 - PHP Object Injection vulnerability

Risk 86
Severity
9.8
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Deserialization of Untrusted Data vulnerability in ThemeREX Group Partiso partiso allows Object Injection.This issue affects Partiso: from n/a through 1.1.13.

First published (updated )
CVE-2026-93934

ThemeREX Group IPharmWordPress IPharm theme <= 1.2.4 - PHP Object Injection vulnerability

Risk 86
Severity
9.8
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Deserialization of Untrusted Data vulnerability in ThemeREX Group IPharm ipharm allows Object Injection.This issue affects IPharm: from n/a through 1.2.4.

First published (updated )
CVE-2026-93936

ThemeREX Group Let's PlayWordPress Let's Play theme <= 1.1.15 - PHP Object Injection vulnerability

Risk 86
Severity
9.8
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Deserialization of Untrusted Data vulnerability in ThemeREX Group Let's Play playhockey allows Object Injection.This issue affects Let's Play: from n/a through 1.1.15.

First published (updated )
CVE-2026-93935

ThemeREX Group SmashWordPress Smash theme <= 1.12.0 - PHP Object Injection vulnerability

Risk 86
Severity
9.8
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Deserialization of Untrusted Data vulnerability in ThemeREX Group Smash smash allows Object Injection.This issue affects Smash: from n/a through 1.12.0.

First published (updated )
CVE-2026-93931

ThemeREX Group Smart CasaWordPress Smart Casa theme <= 1.0.12 - PHP Object Injection vulnerability

Risk 86
Severity
9.8
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Deserialization of Untrusted Data vulnerability in ThemeREX Group Smart Casa smart-casa allows Object Injection.This issue affects Smart Casa: from n/a through 1.0.12.

First published (updated )
CVE-2026-93932

ThemeREX Group RosalindaWordPress Rosalinda theme <= 1.2.4 - PHP Object Injection vulnerability

Risk 86
Severity
9.8
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Deserialization of Untrusted Data vulnerability in ThemeREX Group Rosalinda rosalinda allows Object Injection.This issue affects Rosalinda: from n/a through 1.2.4.

First published (updated )
CVE-2026-93933

ThemeREX Group TantraWordPress Tantra theme <= 2.9.0 - PHP Object Injection vulnerability

Risk 86
Severity
9.8
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Deserialization of Untrusted Data vulnerability in ThemeREX Group Tantra tantra allows Object Injection.This issue affects Tantra: from n/a through 2.9.0.

First published (updated )
CVE-2026-93930

ThemeREX Group TravesiaWordPress Travesia theme <= 1.1.16 - PHP Object Injection vulnerability

Risk 86
Severity
9.8
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Deserialization of Untrusted Data vulnerability in ThemeREX Group Travesia travesia allows Object Injection.This issue affects Travesia: from n/a through 1.1.16.

First published (updated )
CVE-2026-93929

ThemeREX Group ThemeREX AddonsWordPress ThemeREX Addons plugin <= 2.46.0 - Server Side Request Forgery (SSRF) vulnerability

Risk 39
Severity
6.4
SSRF
AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N

Server-Side Request Forgery (SSRF) vulnerability in ThemeREX Group ThemeREX Addons trxaddons allows Server Side Request Forgery.This issue affects ThemeREX Addons: from n/a through 2.46.0.

First published (updated )
CVE-2026-102797

ThemeREX Group ThemeREX AddonsWordPress ThemeREX Addons plugin <= 2.46.0 - Cross Site Scripting (XSS) vulnerability

Risk 46
Severity
6.5
XSS
AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeREX Group ThemeREX Addons trxaddons allows Stored XSS.This issue affects ThemeREX Addons: from n/a through 2.46.0.

First published (updated )
CVE-2026-102798

ThemeREX Group ThemeREX AddonsWordPress ThemeREX Addons plugin <= 2.36.1.1 - PHP Object Injection vulnerability

Risk 86
Severity
9.8
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Deserialization of Untrusted Data vulnerability in ThemeREX Group ThemeREX Addons trxaddons allows Object Injection.This issue affects ThemeREX Addons: from n/a through 2.36.1.1.

1 / 2
Source: MITRE
First published (updated )
CVE-2025-60205

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203