CVE Intelligence

ThemeREX Education Center vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting ThemeREX Education Center: 2 record(s), with affected versions and fixes.

CVE-2026-66483 Critical · 9.8 CWE-502 Oct 10, 2026
WordPress Education Center theme <= 3.6.12 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Education Center <= 3.6.12 versions.
CVE-2026-94063 High · 7.1 CWE-79 Oct 9, 2026
WordPress Education Center theme <= 3.6.12 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeREX Education Center education allows Reflected XSS.This issue affects Education Center: from n/a through 3.6.12.