EUVD-2026-96183

Deserialization of Untrusted Data vulnerability in ThemeREX Group Booklovers booklovers allows Object Injection.This issue affects Booklovers: from n/a through 2.13.0...

CVE-2026-93943

The Convex WordPress theme by ThemeREX Group, versions up to and including 1.16.0 , is vulnerable to a PHP Object Injection flaw. This issue stems from the deserialization of untrusted data , which can allow an attacker to execute arbitrary code or perform unauthorized actions. The vulnerability ...

CVE-2026-93944

The ThemeREX Group Camelia WordPress theme (versions

CVE-2026-93945

The Axiomthemes Balance WordPress theme (versions

EUVD-2026-96186

Deserialization of Untrusted Data vulnerability in ThemeREX Group Camelia camelia allows Object Injection.This issue affects Camelia: from n/a through 1.2.15...

EUVD-2026-96188

Deserialization of Untrusted Data vulnerability in ThemeREX Group Dwell dwell allows Object Injection.This issue affects Dwell: from n/a through 1.16.0...

EUVD-2026-96185

Deserialization of Untrusted Data vulnerability in Axiomthemes Balance balance allows Object Injection.This issue affects Balance: from n/a through 1.12.0...

EUVD-2026-96187

Deserialization of Untrusted Data vulnerability in ThemeREX Group Convex convex allows Object Injection.This issue affects Convex: from n/a through 1.16.0...

EUVD-2026-96184

Deserialization of Untrusted Data vulnerability in ThemeREX Group Gutentype gutentype allows Object Injection.This issue affects Gutentype: from n/a through 2.1.12...

CVE-2026-62046

The Gutentype theme for WordPress (versions

CVE-2026-93942

The ThemeREX Group Dwell WordPress theme (versions

CVE-2026-93937

The WordPress Hygia theme (versions

CVE-2026-93938

The Hogwords theme by ThemeREX Group, specifically versions up to and including 1.2.7 , is vulnerable to a PHP Object Injection flaw. The root cause is the deserialization of untrusted data , which allows an attacker to inject objects into the application. This vulnerability carries a CRITICAL se...

CVE-2026-93940

The ThemeREX Group Greeny WordPress theme (versions

CVE-2026-93941

The ThemeREX Group Edema WordPress theme is affected by a PHP Object Injection vulnerability (CWE-502) in versions up to and including 1.2.2.2 . The root cause is the deserialization of untrusted data , which allows an attacker to achieve object injection. This vulnerability has a CRITICAL base s...

EUVD-2026-96189

Deserialization of Untrusted Data vulnerability in ThemeREX Group Edema edema allows Object Injection.This issue affects Edema: from n/a through 1.2.2.2...

EUVD-2026-96190

Deserialization of Untrusted Data vulnerability in ThemeREX Group Greeny greeny allows Object Injection.This issue affects Greeny: from n/a through 2.10.0...

EUVD-2026-96191

Deserialization of Untrusted Data vulnerability in ThemeREX Group Hogwords hogwords allows Object Injection.This issue affects Hogwords: from n/a through 1.2.7...

EUVD-2026-96192

Deserialization of Untrusted Data vulnerability in ThemeREX Group Hygia hygia allows Object Injection.This issue affects Hygia: from n/a through 1.21.0...

CVE-2026-93934

The ThemeREX Group Partiso WordPress theme is vulnerable to a PHP Object Injection vulnerability in versions up to and including 1.1.13 . This issue stems from the deserialization of untrusted data , which can allow an attacker to inject objects into the application. The impact is rated as CRITIC...