Vulnerabilities in themerex
188 resultsVexday analysis
Themerex apresenta footprint reduzido com apenas 1 CVE registrado na base, sem evidências de exploração ativa no momento. A vulnerabilidade é classificada como crítica, mas sua idade superior a 90 dias sugere que o risco imediato é baixo, embora demande atenção se ainda não mitigado.
CVE-2025-69174HIGHWordPress Etude theme <= 1.6 - Local File Inclusion vulnerabilityEPSS 0.3%CVE-2025-58952HIGHWordPress Neuronet theme < 1.14.0 - Local File Inclusion vulnerabilityEPSS 0.3%CVE-2026-22338HIGHWordPress EcoBlue theme <= 1.15 - Local File Inclusion vulnerabilityEPSS 0.3%CVE-2024-13769MEDIUMPuzzles | WP Magazine / Review with Store WordPress Theme + RTL <= 4.2.4 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site ScriptingEPSS 0.3%CVE-2026-57746HIGHWordPress Booked plugin <= 3.0.0 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2025-0837MEDIUMPuzzles <= 4.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via ShortcodeEPSS 0.3%CVE-2025-6997MEDIUMThemeREX Addons <= 2.35.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via trx_addons_get_svg_from_file FunctionEPSS 0.2%CVE-2026-57747MEDIUMWordPress Booked plugin <= 3.0.0 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.2%