[ Vendor · 20 CVEs ]
ThemeREX Group
CVEs affecting ThemeREX Group published in the last 30 days, plus any ThemeREX Group CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-57742 | 10 Oct 2026 | CVSS 7.1 | ThemeREX Group Kids PlanetImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeREX Group Kids Planet allows Reflected… | |
| CVE-2026-93936 | 10 Oct 2026 | CVSS 9.8 | ThemeREX Group IPharmDeserialization of Untrusted Data vulnerability in ThemeREX Group IPharm ipharm allows Object Injection.This issue affects IPharm: from n/a through… | |
| CVE-2026-93937 | 10 Oct 2026 | CVSS 9.8 | ThemeREX Group HygiaDeserialization of Untrusted Data vulnerability in ThemeREX Group Hygia hygia allows Object Injection.This issue affects Hygia: from n/a through… | |
| CVE-2026-93938 | 10 Oct 2026 | CVSS 9.8 | ThemeREX Group HogwordsDeserialization of Untrusted Data vulnerability in ThemeREX Group Hogwords hogwords allows Object Injection.This issue affects Hogwords: from n/a… | |
| CVE-2026-93940 | 10 Oct 2026 | CVSS 9.8 | ThemeREX Group GreenyDeserialization of Untrusted Data vulnerability in ThemeREX Group Greeny greeny allows Object Injection.This issue affects Greeny: from n/a through… | |
| CVE-2026-93941 | 10 Oct 2026 | CVSS 9.8 | ThemeREX Group EdemaDeserialization of Untrusted Data vulnerability in ThemeREX Group Edema edema allows Object Injection.This issue affects Edema: from n/a through… | |
| CVE-2026-93942 | 10 Oct 2026 | CVSS 9.8 | ThemeREX Group DwellDeserialization of Untrusted Data vulnerability in ThemeREX Group Dwell dwell allows Object Injection.This issue affects Dwell: from n/a through… | |
| CVE-2026-93943 | 10 Oct 2026 | CVSS 9.8 | ThemeREX Group ConvexDeserialization of Untrusted Data vulnerability in ThemeREX Group Convex convex allows Object Injection.This issue affects Convex: from n/a through… | |
| CVE-2026-93944 | 10 Oct 2026 | CVSS 9.8 | ThemeREX Group CameliaDeserialization of Untrusted Data vulnerability in ThemeREX Group Camelia camelia allows Object Injection.This issue affects Camelia: from n/a… | |
| CVE-2026-93929 | 10 Oct 2026 | CVSS 9.8 | ThemeREX Group TravesiaDeserialization of Untrusted Data vulnerability in ThemeREX Group Travesia travesia allows Object Injection.This issue affects Travesia: from n/a… | |
| CVE-2026-93930 | 10 Oct 2026 | CVSS 9.8 | ThemeREX Group TantraDeserialization of Untrusted Data vulnerability in ThemeREX Group Tantra tantra allows Object Injection.This issue affects Tantra: from n/a through… | |
| CVE-2026-93931 | 10 Oct 2026 | CVSS 9.8 | ThemeREX Group SmashDeserialization of Untrusted Data vulnerability in ThemeREX Group Smash smash allows Object Injection.This issue affects Smash: from n/a through… | |
| CVE-2026-93932 | 10 Oct 2026 | CVSS 9.8 | ThemeREX Group Smart CasaDeserialization of Untrusted Data vulnerability in ThemeREX Group Smart Casa smart-casa allows Object Injection.This issue affects Smart Casa: from… | |
| CVE-2026-93933 | 10 Oct 2026 | CVSS 9.8 | ThemeREX Group RosalindaDeserialization of Untrusted Data vulnerability in ThemeREX Group Rosalinda rosalinda allows Object Injection.This issue affects Rosalinda: from n/a… | |
| CVE-2026-93934 | 10 Oct 2026 | CVSS 9.8 | ThemeREX Group PartisoDeserialization of Untrusted Data vulnerability in ThemeREX Group Partiso partiso allows Object Injection.This issue affects Partiso: from n/a… | |
| CVE-2026-93935 | 10 Oct 2026 | CVSS 9.8 | ThemeREX Group Let's PlayDeserialization of Untrusted Data vulnerability in ThemeREX Group Let's Play playhockey allows Object Injection.This issue affects Let's Play: from… | |
| CVE-2026-62045 | 10 Oct 2026 | CVSS 9.8 | ThemeREX Group BookloversDeserialization of Untrusted Data vulnerability in ThemeREX Group Booklovers booklovers allows Object Injection.This issue affects Booklovers: from… | |
| CVE-2026-62046 | 10 Oct 2026 | CVSS 9.8 | ThemeREX Group GutentypeDeserialization of Untrusted Data vulnerability in ThemeREX Group Gutentype gutentype allows Object Injection.This issue affects Gutentype: from n/a… | |
| CVE-2026-102797 | 2 Oct 2026 | CVSS 6.4 | ThemeREX Group ThemeREX AddonsServer-Side Request Forgery (SSRF) vulnerability in ThemeREX Group ThemeREX Addons trx_addons allows Server Side Request Forgery.This issue affects… | |
| CVE-2026-102798 | 2 Oct 2026 | CVSS 6.5 | ThemeREX Group ThemeREX AddonsImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeREX Group ThemeREX Addons trx_addons… |