Vulnerabilidades de ThemeREX
CVEs publicadas que afetam produtos de ThemeREX: 202 registro(s), com severidade, exploração e correções.
ThemeREX Addons 3Splendour 2FreightCo 2Alliance 2Equadio 2ShiftCV 2Stargaze 2Invetex 2N7 | Golf Club Sports & Events 2Law Office 2Yacht Rental 2Booked 2Abelle 2Asia Garden 2Windsor 2WineShop 2Education Center 2Tipsy 2Gable 1Tint 1Plank 1Cobble 1Yokoo 1R&F 1Extreme Store 1Lorem Ipsum | Books & Media Store 1Pets Club 1Solaris 1Equestrian Centre 1Tennis Club 1Humanum 1OsTende 1The Qlean 1Quanzo 1ConFix 1Avventure 1Meals & Wheels 1Aldo 1Tediss 1Justitia 1
CVE-2026-65573
Crítica · 9.8
CWE-502 06/08/2026
WordPress Abelle theme <= 1.22 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Abelle <= 1.22 versions.
CVE-2026-57747
Média · 6.5
CWE-352 02/07/2026
WordPress Booked plugin <= 3.0.0 - Cross Site Request Forgery (CSRF) vulnerability
Unauthenticated Cross Site Request Forgery (CSRF) in Booked <= 3.0.0 versions.
CVE-2026-57746
Alta · 7.1
CWE-862 02/07/2026
WordPress Booked plugin <= 3.0.0 - Broken Access Control vulnerability
Subscriber Broken Access Control in Booked <= 3.0.0 versions.
CVE-2025-69175
Alta · 8.1
CWE-98 17/06/2026
WordPress Line Agency theme <= 1.3.1 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in Line Agency <= 1.3.1 versions.
CVE-2025-69174
Alta · 8.1
CWE-98 17/06/2026
WordPress Etude theme <= 1.6 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in Etude <= 1.6 versions.
CVE-2025-69170
Alta · 8.1
CWE-98 17/06/2026
WordPress Eventicity theme <= 1.5 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in Eventicity <= 1.5 versions.
CVE-2025-69166
Alta · 8.1
CWE-98 17/06/2026
WordPress Gunslinger theme <= 1.7 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in Gunslinger <= 1.7 versions.
CVE-2025-69164
Alta · 8.1
CWE-98 17/06/2026
WordPress Skyward theme <= 1.10 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in Skyward <= 1.10 versions.
CVE-2025-69158
Alta · 8.1
CWE-98 17/06/2026
WordPress Granola theme <= 1.13 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in Granola <= 1.13 versions.
CVE-2025-69157
Alta · 8.1
CWE-98 17/06/2026
WordPress Gamic theme <= 1.15 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in Gamic <= 1.15 versions.
CVE-2025-69144
Alta · 8.1
CWE-98 17/06/2026
WordPress Preservation theme <= 1.10 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in Preservation <= 1.10 versions.
CVE-2025-69127
Crítica · 9.8
CWE-502 17/06/2026
WordPress Plumbing theme <= 1.6 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Plumbing <= 1.6 versions.
CVE-2025-69126
Alta · 8.1
CWE-98 17/06/2026
WordPress Fortius theme <= 2.3.0 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in Fortius <= 2.3.0 versions.
CVE-2025-69123
Alta · 8.1
CWE-98 17/06/2026
WordPress Snow Club theme <= 1.1 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in Snow Club <= 1.1 versions.
CVE-2025-69120
Alta · 8.1
CWE-98 17/06/2026
WordPress Dazzle theme <= 1.0.0 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in Dazzle <= 1.0.0 versions.
CVE-2025-69115
Alta · 8.1
CWE-98 17/06/2026
WordPress LuxMed | Medicine & Healthcare Doctor WordPress Theme theme <= 1.2.2 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in LuxMed | Medicine & Healthcare Doctor WordPress Theme <= 1.2.2 versions.
CVE-2025-69111
Crítica · 9.8
CWE-502 17/06/2026
WordPress Reisen theme <= 1.4.1 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Reisen <= 1.4.1 versions.
CVE-2025-69106
Alta · 8.1
CWE-98 17/06/2026
WordPress Imba theme <= 1.5.0 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in Imba <= 1.5.0 versions.
CVE-2026-22338
Alta · 8.1
CWE-98 17/06/2026
WordPress EcoBlue theme <= 1.15 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in EcoBlue <= 1.15 versions.
CVE-2026-22331
Alta · 8.1
CWE-98 17/06/2026
WordPress AutoParts theme <= 1.5.8 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in AutoParts <= 1.5.8 versions.
CVE-2025-69176
Alta · 8.1
CWE-98 17/06/2026
WordPress ITactics theme <= 1.0 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in ITactics <= 1.0 versions.
CVE-2025-69173
Alta · 8.1
CWE-98 17/06/2026
WordPress Tipsy theme <= 1.1 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in Tipsy <= 1.1 versions.
CVE-2025-69172
Alta · 8.1
CWE-98 17/06/2026
WordPress Resurs theme <= 1.3 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in Resurs <= 1.3 versions.
CVE-2025-69171
Alta · 8.1
CWE-98 17/06/2026
WordPress Orpheus theme <= 1.3 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in Orpheus <= 1.3 versions.
CVE-2025-69168
Alta · 8.1
CWE-98 17/06/2026
WordPress Spike theme <= 1.2 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in Spike <= 1.2 versions.