CVE Intelligence

ThemeREX vulnerabilities

🔔 Create alert RSS

Published CVEs affecting ThemeREX products: 202 record(s), with severity, exploitation and fixes.

ThemeREX Addons 3Splendour 2FreightCo 2Alliance 2Equadio 2ShiftCV 2Stargaze 2Invetex 2N7 | Golf Club Sports & Events 2Law Office 2Yacht Rental 2Booked 2Abelle 2Asia Garden 2Windsor 2WineShop 2Education Center 2Tipsy 2Gable 1Tint 1Plank 1Cobble 1Yokoo 1R&F 1Extreme Store 1Lorem Ipsum | Books & Media Store 1Pets Club 1Solaris 1Equestrian Centre 1Tennis Club 1Humanum 1OsTende 1The Qlean 1Quanzo 1ConFix 1Avventure 1Meals & Wheels 1Aldo 1Tediss 1Justitia 1

Exploited only (KEV) →

CVE-2026-65573 Critical · 9.8 CWE-502 Aug 6, 2026
WordPress Abelle theme <= 1.22 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Abelle <= 1.22 versions.
CVE-2026-57747 Medium · 6.5 CWE-352 Jul 2, 2026
WordPress Booked plugin <= 3.0.0 - Cross Site Request Forgery (CSRF) vulnerability
Unauthenticated Cross Site Request Forgery (CSRF) in Booked <= 3.0.0 versions.
CVE-2026-57746 High · 7.1 CWE-862 Jul 2, 2026
WordPress Booked plugin <= 3.0.0 - Broken Access Control vulnerability
Subscriber Broken Access Control in Booked <= 3.0.0 versions.
CVE-2025-69175 High · 8.1 CWE-98 Jun 17, 2026
WordPress Line Agency theme <= 1.3.1 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in Line Agency <= 1.3.1 versions.
CVE-2025-69174 High · 8.1 CWE-98 Jun 17, 2026
WordPress Etude theme <= 1.6 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in Etude <= 1.6 versions.
CVE-2025-69170 High · 8.1 CWE-98 Jun 17, 2026
WordPress Eventicity theme <= 1.5 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in Eventicity <= 1.5 versions.
CVE-2025-69166 High · 8.1 CWE-98 Jun 17, 2026
WordPress Gunslinger theme <= 1.7 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in Gunslinger <= 1.7 versions.
CVE-2025-69164 High · 8.1 CWE-98 Jun 17, 2026
WordPress Skyward theme <= 1.10 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in Skyward <= 1.10 versions.
CVE-2025-69158 High · 8.1 CWE-98 Jun 17, 2026
WordPress Granola theme <= 1.13 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in Granola <= 1.13 versions.
CVE-2025-69157 High · 8.1 CWE-98 Jun 17, 2026
WordPress Gamic theme <= 1.15 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in Gamic <= 1.15 versions.
CVE-2025-69144 High · 8.1 CWE-98 Jun 17, 2026
WordPress Preservation theme <= 1.10 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in Preservation <= 1.10 versions.
CVE-2025-69127 Critical · 9.8 CWE-502 Jun 17, 2026
WordPress Plumbing theme <= 1.6 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Plumbing <= 1.6 versions.
CVE-2025-69126 High · 8.1 CWE-98 Jun 17, 2026
WordPress Fortius theme <= 2.3.0 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in Fortius <= 2.3.0 versions.
CVE-2025-69123 High · 8.1 CWE-98 Jun 17, 2026
WordPress Snow Club theme <= 1.1 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in Snow Club <= 1.1 versions.
CVE-2025-69120 High · 8.1 CWE-98 Jun 17, 2026
WordPress Dazzle theme <= 1.0.0 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in Dazzle <= 1.0.0 versions.
CVE-2025-69115 High · 8.1 CWE-98 Jun 17, 2026
WordPress LuxMed | Medicine & Healthcare Doctor WordPress Theme theme <= 1.2.2 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in LuxMed | Medicine & Healthcare Doctor WordPress Theme <= 1.2.2 versions.
CVE-2025-69111 Critical · 9.8 CWE-502 Jun 17, 2026
WordPress Reisen theme <= 1.4.1 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Reisen <= 1.4.1 versions.
CVE-2025-69106 High · 8.1 CWE-98 Jun 17, 2026
WordPress Imba theme <= 1.5.0 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in Imba <= 1.5.0 versions.
CVE-2026-22338 High · 8.1 CWE-98 Jun 17, 2026
WordPress EcoBlue theme <= 1.15 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in EcoBlue <= 1.15 versions.
CVE-2026-22331 High · 8.1 CWE-98 Jun 17, 2026
WordPress AutoParts theme <= 1.5.8 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in AutoParts <= 1.5.8 versions.
CVE-2025-69176 High · 8.1 CWE-98 Jun 17, 2026
WordPress ITactics theme <= 1.0 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in ITactics <= 1.0 versions.
CVE-2025-69173 High · 8.1 CWE-98 Jun 17, 2026
WordPress Tipsy theme <= 1.1 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in Tipsy <= 1.1 versions.
CVE-2025-69172 High · 8.1 CWE-98 Jun 17, 2026
WordPress Resurs theme <= 1.3 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in Resurs <= 1.3 versions.
CVE-2025-69171 High · 8.1 CWE-98 Jun 17, 2026
WordPress Orpheus theme <= 1.3 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in Orpheus <= 1.3 versions.
CVE-2025-69168 High · 8.1 CWE-98 Jun 17, 2026
WordPress Spike theme <= 1.2 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in Spike <= 1.2 versions.