Vulnerabilities in ThemeREX
236 resultsCVE-2026-78531CRITICALWordPress Jacqueline theme <= 2.22 - PHP Object Injection vulnerabilityEPSS 0.3%CVE-2026-62124CRITICALWordPress N7 | Golf Club Sports & Events theme <= 2.21 - PHP Object Injection vulnerabilityEPSS 0.3%CVE-2026-66563CRITICALWordPress Windsor theme <= 2.10 - PHP Object Injection vulnerabilityEPSS 0.3%CVE-2026-62123CRITICALWordPress Invetex theme <= 2.18 - PHP Object Injection vulnerabilityEPSS 0.3%CVE-2026-78529CRITICALWordPress Alliance theme <= 3.11 - PHP Object Injection vulnerabilityEPSS 0.3%CVE-2026-66564CRITICALWordPress ShiftCV theme <= 3.0.14 - PHP Object Injection vulnerabilityEPSS 0.3%CVE-2026-62125CRITICALWordPress Asia Garden theme <= 1.3.1 - PHP Object Injection vulnerabilityEPSS 0.3%CVE-2026-66483CRITICALWordPress Education Center theme <= 3.6.12 - PHP Object Injection vulnerabilityEPSS 0.3%CVE-2024-13769MEDIUMPuzzles | WP Magazine / Review with Store WordPress Theme + RTL <= 4.2.4 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site ScriptingEPSS 0.3%CVE-2026-57746HIGHWordPress Booked plugin <= 3.0.0 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2025-0837MEDIUMPuzzles <= 4.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via ShortcodeEPSS 0.3%CVE-2025-6997MEDIUMThemeREX Addons <= 2.35.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via trx_addons_get_svg_from_file FunctionEPSS 0.2%CVE-2026-97236MEDIUMWordPress ThemeREX Addons plugin < 2.45.0 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-97235HIGHWordPress ThemeREX Addons plugin < 2.45.0 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-57747MEDIUMWordPress Booked plugin <= 3.0.0 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.2%CVE-2026-94063HIGHWordPress Education Center theme <= 3.6.12 - Reflected Cross Site Scripting (XSS) vulnerabilityEPSS 0.1%