This site currently shows sample data for demonstration.
BDVDB
বাংলা

Vendor Profiles

ThemeREX

Number 74 by total vulnerabilities in the catalog.

Computed from the whole catalog when the site is built.

Combines these spellings from source records: ThemeREX, ThemeRex

Compare with another vendor

Total vulnerabilities

235

Critical

70

High

160

Known Exploited

0

Exploit available

0

Network, no login needed

97.4%

Of 235 scored records

New vulnerabilities per year, by severity
  • Critical
  • High
  • Medium
  • Low
  • None or not scored
Show as table
PeriodTotalCriticalHighMediumLowNone or not scored
2026 (incomplete)22767158200
2025832300

Top products

ProductTotalCritical/High
ThemeREX Addons64
Puzzles | WP Magazine / Review with Store WordPress Theme + RTL31
Abelle22
Alliance22
Asia Garden22
Avventure22
Bonbon22
Booked21
Coinpress22
Edge Decor22

Top bug types

Bug typeTotalCritical/High
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')157157
Insecure Deserialization6969
Cross-Site Scripting52
Missing Authorization21
Cross-Site Request Forgery10
Unrestricted File Upload11

Newest vulnerabilities

CVETitlePublishedSeverityEPSS
CVE-2026-119526WordPress Royal Event theme <= 2.0 - PHP Object Injection vulnerabilityCritical0.4%
CVE-2026-62018WordPress Gunslinger theme <= 1.11 - PHP Object Injection vulnerabilityCritical0.4%
CVE-2026-62017WordPress Good Homes theme <= 1.3.13 - PHP Object Injection vulnerabilityCritical0.4%
CVE-2026-62016WordPress Gamic theme <= 1.19 - PHP Object Injection vulnerabilityCritical0.4%
CVE-2026-62015WordPress Gamezone theme <= 1.1.11 - PHP Object Injection vulnerabilityCritical0.4%
CVE-2026-62014WordPress EmojiNation theme <= 1.0.12 - PHP Object Injection vulnerabilityCritical0.4%
CVE-2026-62013WordPress Edge Decor theme <= 2.9 - PHP Object Injection vulnerabilityCritical0.4%
CVE-2026-62012WordPress Coinpress theme <= 1.0.15 - PHP Object Injection vulnerabilityCritical0.4%
CVE-2026-62011WordPress Bonbon theme <= 1.11 - PHP Object Injection vulnerabilityCritical0.4%
CVE-2026-62010WordPress Avventure theme <= 1.1.12 - PHP Object Injection vulnerabilityCritical0.4%