T
Vendor security profile
ThemeREX
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs25
Critical21
CISA KEV0
Public exploit0
Patch rate%0
Avg. CVSS9.4
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
1
3
21
CVE KEV
CVE severity distribution
25toplam CVE
Critical21 (84%)
High3 (12%)
Medium1 (4%)
Patch and exploitation view
%0
Verified patch
%0
CISA KEV
%0
Public exploit
0Patch available
0Partial
0Workaround
0Vendor: no patch
25Unknown
Latest vulnerabilities
7.1
CVE-2026-57742
WordPress Kids Planet theme <= 2.2.14.2 - Cross Site Scripting (XSS) vulnerability
TG
Patch status unknownEPSS %0
9.8
CVE-2026-81797
WordPress Buzz Stone | Magazine & Viral Blog WordPress Theme theme <= 1.0.2 - PHP Object Injection vulnerability
T
Patch status unknownEPSS %0
9.8
CVE-2026-78535
WordPress Photolia theme <= 1.0.3 - PHP Object Injection vulnerability
T
Patch status unknownEPSS %0
9.8
CVE-2026-78531
WordPress Jacqueline theme <= 2.22 - PHP Object Injection vulnerability
T
Patch status unknownEPSS %0
9.8
CVE-2026-78529
WordPress Alliance theme <= 3.11 - PHP Object Injection vulnerability
T
Patch status unknownEPSS %0
9.8
CVE-2026-66564
WordPress ShiftCV theme <= 3.0.14 - PHP Object Injection vulnerability
T
Patch status unknownEPSS %0
9.8
CVE-2026-66563
WordPress Windsor theme <= 2.10 - PHP Object Injection vulnerability
T
Patch status unknownEPSS %0
9.8
CVE-2026-66483
WordPress Education Center theme <= 3.6.12 - PHP Object Injection vulnerability
T
Patch status unknownEPSS %0
9.8
CVE-2026-62125
WordPress Asia Garden theme <= 1.3.1 - PHP Object Injection vulnerability
T
Patch status unknownEPSS %0
9.8
CVE-2026-62124
WordPress N7 | Golf Club Sports & Events theme <= 2.21 - PHP Object Injection vulnerability
T
Patch status unknownEPSS %0