Vulnerabilities in ThemeREX Group

5 results

CVE-2026-39529CRITICALWordPress Elementra theme <= 1.0.9 - PHP Object Injection vulnerabilityEPSS 0.6%CVE-2025-58924HIGHWordPress Geya theme <= 1.15 - Local File Inclusion vulnerabilityEPSS 0.4%CVE-2025-60085HIGHWordPress Learnify theme <= 1.15.0 - Local File Inclusion vulnerabilityEPSS 0.4%CVE-2026-102797MEDIUMWordPress ThemeREX Addons plugin <= 2.46.0 - Server Side Request Forgery (SSRF) vulnerabilityEPSS 0.1%CVE-2026-102798MEDIUMWordPress ThemeREX Addons plugin <= 2.46.0 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.1%