CVE Intelligence

ThemeREX vulnerabilities

🔔 Create alert RSS

Published CVEs affecting ThemeREX products: 202 record(s), with severity, exploitation and fixes.

Exploited only (KEV) →

CVE-2025-69167 High · 8.1 CWE-98 Jun 17, 2026
WordPress Eros theme <= 1.3 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in Eros <= 1.3 versions.
CVE-2025-69165 High · 8.1 CWE-98 Jun 17, 2026
WordPress Choreo theme <= 1.6 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in Choreo <= 1.6 versions.
CVE-2025-69163 High · 8.1 CWE-98 Jun 17, 2026
WordPress WineShop theme <= 3.17 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in WineShop <= 3.17 versions.
CVE-2025-69162 High · 8.1 CWE-98 Jun 17, 2026
WordPress Grecko theme <= 5.17 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in Grecko <= 5.17 versions.
CVE-2025-69161 High · 8.1 CWE-98 Jun 17, 2026
WordPress Snowy theme <= 1.13 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in Snowy <= 1.13 versions.
CVE-2025-69160 High · 8.1 CWE-98 Jun 17, 2026
WordPress Gita theme <= 1.11 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in Gita <= 1.11 versions.
CVE-2025-69159 High · 8.1 CWE-98 Jun 17, 2026
WordPress Printo theme <= 1.11 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in Printo <= 1.11 versions.
CVE-2025-69150 High · 8.1 CWE-98 Jun 17, 2026
WordPress Medeus theme <= 1.14 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in Medeus <= 1.14 versions.
CVE-2025-69149 High · 8.1 CWE-98 Jun 17, 2026
WordPress Top Dog theme <= 1.0.5 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in Top Dog <= 1.0.5 versions.
CVE-2025-69148 High · 8.1 CWE-98 Jun 17, 2026
WordPress Quirky theme <= 1.23 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in Quirky <= 1.23 versions.
CVE-2025-69147 High · 8.1 CWE-98 Jun 17, 2026
WordPress Putter theme <= 1.17 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in Putter <= 1.17 versions.
CVE-2025-69146 High · 8.1 CWE-98 Jun 17, 2026
WordPress Dom theme <= 1.24 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in Dom <= 1.24 versions.
CVE-2025-69145 High · 8.1 CWE-98 Jun 17, 2026
WordPress Gat theme <= 1.16 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in Gat <= 1.16 versions.
CVE-2025-69143 High · 8.1 CWE-98 Jun 17, 2026
WordPress Mission theme <= 1.22 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in Mission <= 1.22 versions.
CVE-2025-69142 High · 8.1 CWE-98 Jun 17, 2026
WordPress Abelle theme <= 1.22 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in Abelle <= 1.22 versions.
CVE-2025-69141 High · 8.1 CWE-98 Jun 17, 2026
WordPress Kelly Young theme <= 1.1.0 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in Kelly Young <= 1.1.0 versions.
CVE-2025-69125 High · 8.1 CWE-98 Jun 17, 2026
WordPress Food Drop theme <= 1.3 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in Food Drop <= 1.3 versions.
CVE-2025-69124 High · 8.1 CWE-98 Jun 17, 2026
WordPress Especio theme <= 1.0 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in Especio <= 1.0 versions.
CVE-2025-69122 Critical · 9.8 CWE-502 Jun 17, 2026
WordPress SeaFood Company theme <= 1.4 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in SeaFood Company <= 1.4 versions.
CVE-2025-69121 High · 8.1 CWE-98 Jun 17, 2026
WordPress Deliciosa theme <= 1.10.0 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in Deliciosa <= 1.10.0 versions.
CVE-2025-69119 High · 8.1 CWE-98 Jun 17, 2026
WordPress Corbesier theme <= 1.15.0 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in Corbesier <= 1.15.0 versions.
CVE-2025-69118 High · 8.1 CWE-98 Jun 17, 2026
WordPress CopyPress theme <= 1.4.5 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in CopyPress <= 1.4.5 versions.
CVE-2025-69117 High · 8.1 CWE-98 Jun 17, 2026
WordPress Ingenioso theme <= 1.14.0 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in Ingenioso <= 1.14.0 versions.
CVE-2025-69116 High · 8.1 CWE-98 Jun 17, 2026
WordPress Iona theme <= 1.0.8 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in Iona <= 1.0.8 versions.
CVE-2025-69114 High · 8.1 CWE-98 Jun 17, 2026
WordPress MaxiNet theme <= 1.2.10 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in MaxiNet <= 1.2.10 versions.