ThemeREX Group

Everything Threat Times has reported about ThemeREX Group: 13 stories, newest first. Part of our Vulnerabilities coverage.

Vulnerabilities

Critical Deserialization Flaw Found in Travesia WordPress Theme Through Version 1.1.16

Threat TimesOct 10, 2026

The National Vulnerability Database lists a CVSS 9.8 critical object injection vulnerability in ThemeREX Group Travesia, affecting versions up to 1.1.16.

Vulnerabilities

Critical Deserialization Flaw Found in ThemeREX Rosalinda WordPress Theme

Threat TimesOct 10, 2026

A CVSS 9.8 vulnerability in the Rosalinda theme allows object injection, affecting versions up to 1.2.4 according to the National Vulnerability Database.

Vulnerabilities

Critical Object Injection Vulnerability Found in Smart Casa Versions Up to 1.0.12

Threat TimesOct 10, 2026

The National Vulnerability Database rates CVE-2026-93932 as critical with a CVSS score of 9.8, affecting ThemeREX Group’s Smart Casa software through version 1.0.12 due to unsafe data deserialization.

Vulnerabilities

Critical Object Injection Flaw Found in ThemeREX Tantra CMS Versions Up to 2.9.0

Threat TimesOct 10, 2026

The National Vulnerability Database rates CVE-2026-93930 as critical, citing untrusted data deserialization risks in the popular web platform.

Vulnerabilities

Let's Play Plugin Critical Flaw CVE-2026-93935 Allows Object Injection

Threat TimesOct 10, 2026

The National Vulnerability Database rates a deserialization flaw in ThemeREX Group's Let's Play plugin as critical, affecting versions through 1.1.15.

Vulnerabilities

Critical Object Injection Flaw Found in ThemeREX Partiso Theme

Threat TimesOct 10, 2026

A CVSS 9.8 vulnerability in Partiso versions up to 1.1.13 allows untrusted data deserialization and object injection, posing a severe risk to affected sites.

Vulnerabilities

Critical Deserialization Flaw Found in ThemeREX Edema Plugin Versions Up to 1.2.2.2

Threat TimesOct 10, 2026

A severe object injection vulnerability in ThemeREX Group Edema allows untrusted data deserialization, posing a high risk to affected installations.

Vulnerabilities

Critical Deserialization Flaw in ThemeREX Greeny Theme Rated 9.8 CVSS

Threat TimesOct 10, 2026

A critical object injection vulnerability in the Greeny WordPress theme allows remote attackers to execute arbitrary code on affected sites through untrusted data.

Vulnerabilities

Hygia Plugin Faces Critical Deserialization Flaw in Versions Through 1.21.0

Threat TimesOct 10, 2026

The National Vulnerability Database rates the untrusted data deserialization issue in ThemeREX Hygia as critical with a CVSS score of 9.8.

Vulnerabilities

Critical Deserialization Flaw Found in ThemeREX Camelia Plugin Through Version 1.2.15

Threat TimesOct 10, 2026

The National Vulnerability Database rates CVE-2026-93944 as critical, citing object injection risks in the popular WordPress theme framework.

Vulnerabilities

Critical CVE-2026-93942 Allows Object Injection in ThemeREX Dwell Up to Version 1.16.0

Threat TimesOct 10, 2026

The National Vulnerability Database lists a critical deserialization flaw in ThemeREX Dwell, affecting versions through 1.16.0 with a CVSS score of 9.8.

Vulnerabilities

Critical CVE-2026-62046 Object Injection Flaw Found in ThemeREX Gutentype Plugin

Threat TimesOct 10, 2026

A CVSS 9.8 critical vulnerability in ThemeREX Group Gutentype allows object injection via untrusted data deserialization in versions up to 2.1.12.

Vulnerabilities

Critical Object Injection Flaw Found in Booklovers WordPress Theme

Threat TimesOct 10, 2026

The National Vulnerability Database rates CVE-2026-62045 as critical due to untrusted data deserialization risks in the Booklovers theme.