Threat database

248 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
Critical	9.8	EPSS 0.6%	CVE-2026-27437Tennis Club · Deserialization of Untrusted Data Critical9.8EPSS 0.6%2026-03-05CVE Database V5CVE-2026-27437 Deserialization of Untrusted Data vulnerability in ThemeREX Tennis Club tennis-sportclub allows Object Injection.This issue affects Tennis Club: from n/a through <= 1.2.3. EPSS 0.6%Vulnerability ThemeREX	CVE Database V5	2026-03-05
Critical	9.8	EPSS 0.4%	CVE-2026-22474Equestrian Centre · Deserialization of Untrusted Data Critical9.8EPSS 0.4%2026-03-05CVE Database V5CVE-2026-22474 Deserialization of Untrusted Data vulnerability in ThemeREX Equestrian Centre equestrian-centre allows Object Injection.This issue affects Equestrian Centre: from n/a through <= 1.5. EPSS 0.4%Vulnerability ThemeREX	CVE Database V5	2026-03-05
Critical	9.8	EPSS 0.5%	CVE-2026-22454Solaris · Deserialization of Untrusted Data Critical9.8EPSS 0.5%2026-03-05CVE Database V5CVE-2026-22454 Deserialization of Untrusted Data vulnerability in ThemeREX Solaris solaris allows Object Injection.This issue affects Solaris: from n/a through <= 2.5. EPSS 0.5%Vulnerability ThemeREX	CVE Database V5	2026-03-05
Critical	9.8	EPSS 0.5%	CVE-2026-22453Pets Club · Deserialization of Untrusted Data Critical9.8EPSS 0.5%2026-03-05CVE Database V5CVE-2026-22453 Deserialization of Untrusted Data vulnerability in ThemeREX Pets Club petclub allows Object Injection.This issue affects Pets Club: from n/a through <= 2.3. EPSS 0.5%Vulnerability ThemeREX	CVE Database V5	2026-03-05
High	8.1	EPSS 0.5%	CVE-2026-22452Hoverex · Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File… High8.1EPSS 0.5%2026-03-05CVE Database V5CVE-2026-22452 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Hoverex hoverex allows PHP Local File Inclusion.This issue affects Hoverex: from n/a through <= 1.5.10. EPSS 0.5%Vulnerability ThemeREX	CVE Database V5	2026-03-05
High	8.1	EPSS 0.5%	CVE-2026-22443Alliance · Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File… High8.1EPSS 0.5%2026-03-05CVE Database V5CVE-2026-22443 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Alliance alliance allows PHP Local File Inclusion.This issue affects Alliance: from n/a through <= 3.1.1. EPSS 0.5%Vulnerability ThemeREX	CVE Database V5	2026-03-05
Critical	9.8	EPSS 0.5%	CVE-2025-54001Classter · Deserialization of Untrusted Data Critical9.8EPSS 0.5%2026-03-05CVE Database V5CVE-2025-54001 Deserialization of Untrusted Data vulnerability in ThemeREX Classter classter allows Object Injection.This issue affects Classter: from n/a through <= 2.5. EPSS 0.5%Vulnerability ThemeREX	CVE Database V5	2026-03-05
High	8.1	EPSS 0.5%	CVE-2025-53335Berger · Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File… High8.1EPSS 0.5%2026-03-05CVE Database V5CVE-2025-53335 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Berger berger allows PHP Local File Inclusion.This issue affects Berger: from n/a through <= 1.1.1. EPSS 0.5%Vulnerability ThemeREX	CVE Database V5	2026-03-05
High	8.1	EPSS 0.6%	CVE-2025-69406FreightCo · Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File… High8.1EPSS 0.6%2026-02-20CVE Database V5CVE-2025-69406 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX FreightCo freightco allows PHP Local File Inclusion.This issue affects FreightCo: from n/a through <= 1.1.7. EPSS 0.6%Vulnerability ThemeREX	CVE Database V5	2026-02-20
Critical	9.8	EPSS 0.4%	CVE-2025-69405Lorem Ipsum \| Books & Media Store · Deserialization of Untrusted Data Critical9.8EPSS 0.4%2026-02-20CVE Database V5CVE-2025-69405 Deserialization of Untrusted Data vulnerability in ThemeREX Lorem Ipsum \| Books & Media Store lorem-ipsum-books-media-store allows Object Injection.This issue affects Lorem Ipsum \| Books & Media Store: from n/a through <= 1.2.11. EPSS 0.4%Vulnerability ThemeREX	CVE Database V5	2026-02-20
Critical	9.8	EPSS 0.4%	CVE-2025-69404Extreme Store · Deserialization of Untrusted Data Critical9.8EPSS 0.4%2026-02-20CVE Database V5CVE-2025-69404 Deserialization of Untrusted Data vulnerability in ThemeREX Extreme Store extremestore allows Object Injection.This issue affects Extreme Store: from n/a through <= 1.5.10. EPSS 0.4%Vulnerability ThemeREX	CVE Database V5	2026-02-20
High	8.1	EPSS 0.6%	CVE-2025-69402R&F · Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File… High8.1EPSS 0.6%2026-02-20CVE Database V5CVE-2025-69402 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX R&F rf allows PHP Local File Inclusion.This issue affects R&F: from n/a through <= 1.5. EPSS 0.6%Vulnerability ThemeREX	CVE Database V5	2026-02-20
High	8.1	EPSS 0.6%	CVE-2025-69400Yokoo · Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File… High8.1EPSS 0.6%2026-02-20CVE Database V5CVE-2025-69400 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Yokoo yokoo allows PHP Local File Inclusion.This issue affects Yokoo: from n/a through <= 1.1.11. EPSS 0.6%Vulnerability ThemeREX	CVE Database V5	2026-02-20
High	8.1	EPSS 0.6%	CVE-2025-69399Cobble · Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File… High8.1EPSS 0.6%2026-02-20CVE Database V5CVE-2025-69399 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Cobble cobble allows PHP Local File Inclusion.This issue affects Cobble: from n/a through <= 1.7. EPSS 0.6%Vulnerability ThemeREX	CVE Database V5	2026-02-20
High	8.1	EPSS 0.6%	CVE-2025-69398Plank · Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File… High8.1EPSS 0.6%2026-02-20CVE Database V5CVE-2025-69398 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Plank plank allows PHP Local File Inclusion.This issue affects Plank: from n/a through <= 1.7. EPSS 0.6%Vulnerability ThemeREX	CVE Database V5	2026-02-20
High	8.1	EPSS 0.6%	CVE-2025-69397Tint · Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File… High8.1EPSS 0.6%2026-02-20CVE Database V5CVE-2025-69397 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Tint tint allows PHP Local File Inclusion.This issue affects Tint: from n/a through <= 1.7. EPSS 0.6%Vulnerability ThemeREX	CVE Database V5	2026-02-20
High	8.1	EPSS 0.6%	CVE-2025-69396Splendour · Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File… High8.1EPSS 0.6%2026-02-20CVE Database V5CVE-2025-69396 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Splendour splendour allows PHP Local File Inclusion.This issue affects Splendour: from n/a through <= 1.23. EPSS 0.6%Vulnerability ThemeREX	CVE Database V5	2026-02-20
High	8.1	EPSS 0.6%	CVE-2025-69395Gable · Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File… High8.1EPSS 0.6%2026-02-20CVE Database V5CVE-2025-69395 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Gable gable allows PHP Local File Inclusion.This issue affects Gable: from n/a through <= 1.5. EPSS 0.6%Vulnerability ThemeREX	CVE Database V5	2026-02-20
Critical	9.8	EPSS 0.5%	CVE-2025-69079Sound \| Musical Instruments Online Store · Deserialization of Untrusted Data Critical9.8EPSS 0.5%2026-01-22CVE Database V5CVE-2025-69079 Deserialization of Untrusted Data vulnerability in ThemeREX Sound \| Musical Instruments Online Store musicplace allows Object Injection.This issue affects Sound \| Musical Instruments Online Store: from n/a through <= 1.6.9. EPSS 0.5%Vulnerability ThemeREX	CVE Database V5	2026-01-22
High	8.1	EPSS 0.5%	CVE-2025-69081Hope · Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File… High8.1EPSS 0.5%2026-01-07CVE Database V5CVE-2025-69081 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Hope charity-is-hope allows PHP Local File Inclusion.This issue affects Hope: from n/a through <= 3.0.0. EPSS 0.5%Vulnerability ThemeREX	CVE Database V5	2026-01-07

Showing 221–240 of 248 results