ThemeREX RexCoin deserialization injection vulnerability

ThemeREX RexCoin versions 1.2.6 and earlier contain a deserialization injection vulnerability. This vulnerability stems from unauthenticated PHP object injection...

CVE-2026-54856: ThemeREX RexCoin: Unauthenticated PHP Object Injection in RexCoin <= 1.2.6 versions.

Unauthenticated PHP Object Injection in RexCoin = 1.2.6 versions...

EUVD-2026-9749

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in ThemeREX RexCoin rexcoin allows PHP Local File Inclusion.This issue affects RexCoin: from n/a through = 1.2.6...

PT-2026-23369

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in ThemeREX RexCoin rexcoin allows PHP Local File Inclusion.This issue affects RexCoin: from n/a through = 1.2.6...