目標達成 すべての支援者に感謝 — 100%達成しました！

目標: 1000 CNY · 調達済み: 1336 CNY

100%
コーヒーを一杯おごる

ThemeREX 厂商漏洞列表 / CVE 中文分析 186

ThemeREX 厂商相关 186 条 CVE 漏洞，含 AI 中文分析、POC、CVSS 评分与受影响产品。

ThemeREX 主要开发 WordPress 主题与插件，其核心产品如 Avada 等广泛用于网站构建。截至最新统计，该厂商已收录 125 条 CVE，历史漏洞多集中于远程代码执行、跨站脚本及越权访问，常因输入验证缺失或配置不当引发。其部分插件曾曝出未授权访问风险，导致数据泄露。建议用户及时更新组件，严格遵循最小权限原则，以缓解潜在的安全威胁。

上位製品 ThemeREX: ThemeREX Addons Puzzles | WP Magazine / Review with Store WordPress Theme + RTL Booked Abelle Classter Kelly Young Food Drop Hot Coffee Putter Raider Spirit Mission CopyPress Iona MaxiNet Eros Gita Choreo Deliciosa Medeus Buisson Love Story Work & Travel Company ProLingua Nelson Good Homes Melania MCKinney's Politics Asia Garden Craftis Tuning
CVE IDタイトルCVSS深刻度公開日
CVE-2026-27990 WordPress ConFix theme <= 1.013 - Local File Inclusion vulnerability — ConFixCWE-98 8.1 High2026-03-05
CVE-2026-27988 WordPress Equadio theme <= 1.1.3 - Local File Inclusion vulnerability — EquadioCWE-98 8.1 High2026-03-05
CVE-2026-27989 WordPress Quanzo theme <= 1.0.10 - Local File Inclusion vulnerability — QuanzoCWE-98 8.1 High2026-03-05
CVE-2026-27986 WordPress OsTende theme <= 1.4.3 - Local File Inclusion vulnerability — OsTendeCWE-98 8.1 High2026-03-05
CVE-2026-27985 WordPress Humanum theme <= 1.1.4 - Local File Inclusion vulnerability — HumanumCWE-98 8.1 High2026-03-05
CVE-2026-27987 WordPress The Qlean theme <= 2.12 - Local File Inclusion vulnerability — The QleanCWE-98 8.1 High2026-03-05
CVE-2026-27439 WordPress Dentario theme <= 1.5 - PHP Object Injection vulnerability — DentarioCWE-502 9.8 Critical2026-03-05
CVE-2026-27437 WordPress Tennis Club theme <= 1.2.3 - PHP Object Injection vulnerability — Tennis ClubCWE-502 9.8 Critical2026-03-05
CVE-2026-27438 WordPress Kingler theme <= 1.7 - PHP Object Injection vulnerability — KinglerCWE-502 9.8 Critical2026-03-05
CVE-2026-22474 WordPress Equestrian Centre theme <= 1.5 - PHP Object Injection vulnerability — Equestrian CentreCWE-502 9.8 Critical2026-03-05
CVE-2026-22454 WordPress Solaris theme <= 2.5 - PHP Object Injection vulnerability — SolarisCWE-502 9.8 Critical2026-03-05
CVE-2026-22452 WordPress Hoverex theme <= 1.5.10 - Local File Inclusion vulnerability — HoverexCWE-98 8.1 High2026-03-05
CVE-2026-22453 WordPress Pets Club theme <= 2.3 - PHP Object Injection vulnerability — Pets ClubCWE-502 9.8 Critical2026-03-05
CVE-2026-22443 WordPress Alliance theme <= 3.1.1 - Local File Inclusion vulnerability — AllianceCWE-98 8.1 High2026-03-05
CVE-2025-54001 WordPress Classter theme <= 2.5 - PHP Object Injection vulnerability — ClassterCWE-502 9.8 Critical2026-03-05
CVE-2025-53335 WordPress Berger theme <= 1.1.1 - Local File Inclusion vulnerability — BergerCWE-98 8.1 High2026-03-05
CVE-2025-69405 WordPress Lorem Ipsum | Books & Media Store theme <= 1.2.11 - PHP Object Injection vulnerability — Lorem Ipsum | Books & Media StoreCWE-502 9.8 Critical2026-02-20
CVE-2025-69406 WordPress FreightCo theme <= 1.1.7 - Local File Inclusion vulnerability — FreightCoCWE-98 8.1 High2026-02-20
CVE-2025-69404 WordPress Extreme Store theme <= 1.5.10 - PHP Object Injection vulnerability — Extreme StoreCWE-502 9.8 Critical2026-02-20
CVE-2025-69402 WordPress R&F theme <= 1.5 - Local File Inclusion vulnerability — R&FCWE-98 8.1 High2026-02-20
CVE-2025-69399 WordPress Cobble theme <= 1.7 - Local File Inclusion vulnerability — CobbleCWE-98 8.1 High2026-02-20
CVE-2025-69400 WordPress Yokoo theme <= 1.1.11 - Local File Inclusion vulnerability — YokooCWE-98 8.1 High2026-02-20
CVE-2025-69398 WordPress Plank theme <= 1.7 - Local File Inclusion vulnerability — PlankCWE-98 8.1 High2026-02-20
CVE-2025-69397 WordPress Tint theme <= 1.7 - Local File Inclusion vulnerability — TintCWE-98 8.1 High2026-02-20
CVE-2025-69395 WordPress Gable theme <= 1.5 - Local File Inclusion vulnerability — GableCWE-98 8.1 High2026-02-20
CVE-2025-69396 WordPress Splendour theme <= 1.23 - Local File Inclusion vulnerability — SplendourCWE-98 8.1 High2026-02-20
CVE-2025-69079 WordPress Sound | Musical Instruments Online Store theme <= 1.6.9 - Deserialization of untrusted data vulnerability — Sound | Musical Instruments Online StoreCWE-502 9.8 Critical2026-01-22
CVE-2025-69081 WordPress Hope theme <= 3.0.0 - Local File Inclusion vulnerability — HopeCWE-98 8.1 High2026-01-07
CVE-2025-49890 WordPress Organic Beauty Theme <= 1.4.6 - PHP Object Injection Vulnerability — Organic BeautyCWE-502 9.8 Critical2025-08-20
CVE-2025-6997 ThemeREX Addons <= 2.35.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via trx_addons_get_svg_from_file Function — ThemeREX AddonsCWE-79 6.4 Medium2025-07-19

本页汇总了 ThemeREX 厂商截至目前公开的全部 186 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接，并附带 AI 生成的中文分析以便快速判断风险。