目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1359 元

100%
请我们喝杯咖啡

ThemeREX 厂商漏洞列表 / CVE 中文分析 210

ThemeREX 厂商相关 210 条 CVE 漏洞，含 AI 中文分析、POC、CVSS 评分与受影响产品。

ThemeREX 主要开发 WordPress 主题与插件，其核心产品如 Avada 等广泛用于网站构建。截至最新统计，该厂商已收录 125 条 CVE，历史漏洞多集中于远程代码执行、跨站脚本及越权访问，常因输入验证缺失或配置不当引发。其部分插件曾曝出未授权访问风险，导致数据泄露。建议用户及时更新组件，严格遵循最小权限原则，以缓解潜在的安全威胁。

Top products by ThemeREX: ThemeREX Addons Puzzles | WP Magazine / Review with Store WordPress Theme + RTL WineShop Abelle N7 | Golf Club Sports & Events Windsor ShiftCV Invetex Law Office Tipsy Stargaze Equadio Alliance Yacht Rental Education Center Splendour Asia Garden Booked Putter Gita Eros MaxiNet Iona CopyPress Mission Raider Spirit ZenSoul Especio Yottis Kelly Young
CVE ID 标题 CVSS 风险等级 Published
CVE-2026-112847 WordPress ZenSoul <= 1.13 对象注入漏洞 — ZenSoul CWE-502 9.8 Critical 2026-10-23
CVE-2026-81797 WordPress Buzz Stone 1.0.2及之前版本PHP对象注入漏洞 — Buzz Stone | Magazine & Viral Blog WordPress Theme CWE-502 9.8 Critical 2026-10-10
CVE-2026-78535 WordPress Photolia主题 <= 1.0.3 PHP对象注入漏洞 — Photolia CWE-502 9.8 Critical 2026-10-10
CVE-2026-78531 WordPress Jacqueline主题2.22及以下版本PHP对象注入漏洞 — Jacqueline CWE-502 9.8 Critical 2026-10-10
CVE-2026-78529 WordPress Alliance主题<=3.11 PHP对象注入漏洞 — Alliance CWE-502 9.8 Critical 2026-10-10
CVE-2026-66564 WordPress ShiftCV主题<=3.0.14 PHP对象注入漏洞 — ShiftCV CWE-502 9.8 Critical 2026-10-10
CVE-2026-66563 WordPress Windsor主题 <=2.10 PHP对象注入漏洞 — Windsor CWE-502 9.8 Critical 2026-10-10
CVE-2026-66483 WordPress Education Center主题3.6.12及之前版本PHP对象注入漏洞 — Education Center CWE-502 9.8 Critical 2026-10-10
CVE-2026-62125 WordPress Asia Garden 主题 <= 1.3.1 PHP对象注入漏洞 — Asia Garden CWE-502 9.8 Critical 2026-10-10
CVE-2026-62124 WordPress N7 高尔夫主题 <=2.21 PHP对象注入漏洞 — N7 | Golf Club Sports & Events CWE-502 9.8 Critical 2026-10-10
CVE-2026-62123 WordPress Invetex 主题 <= 2.18 PHP对象注入漏洞 — Invetex CWE-502 9.8 Critical 2026-10-10
CVE-2026-62120 WordPress Law Office主题<=3.20 PHP对象注入漏洞 — Law Office CWE-502 9.8 Critical 2026-10-10
CVE-2026-62090 WordPress WineShop主题3.20及以下版本 PHP对象注入漏洞 — WineShop CWE-502 9.8 Critical 2026-10-10
CVE-2026-62087 WordPress Equadio主题1.1.4及以下版本PHP对象注入漏洞 — Equadio CWE-502 9.8 Critical 2026-10-10
CVE-2026-62086 WordPress Juno主题2.25及以下版本PHP对象注入漏洞 — Juno CWE-502 9.8 Critical 2026-10-10
CVE-2026-62074 WordPress Ozeum主题<=1.3.0 本地文件包含漏洞 — Ozeum CWE-98 8.1 High 2026-10-10
CVE-2026-62054 WordPress Yacht Rental主题<=2.6 PHP对象注入漏洞 — Yacht Rental CWE-502 9.8 Critical 2026-10-10
CVE-2026-62053 WordPress Wine House主题<=3.20 PHP对象注入漏洞 — Wine House CWE-502 9.8 Critical 2026-10-10
CVE-2026-62052 WordPress Tipsy主题<=1.6 PHP对象注入漏洞 — Tipsy CWE-502 9.8 Critical 2026-10-10
CVE-2026-62051 WordPress Stargaze主题 <= 1.10 PHP对象注入漏洞 — Stargaze CWE-502 9.8 Critical 2026-10-10
CVE-2026-62050 WordPress Splendour主题<=1.23 PHP对象注入漏洞 — Splendour CWE-502 9.8 Critical 2026-10-10
CVE-2026-94063 WordPress Education Center 3.6.12 反射型跨站脚本漏洞 — Education Center CWE-79 7.1 High 2026-10-09
CVE-2026-97236 WordPress ThemeREX插件2.45.0前跨站脚本漏洞 — ThemeREX Addons CWE-79 6.5 Medium 2026-09-30
CVE-2026-97235 WordPress ThemeREX插件2.45.0前跨站脚本漏洞 — ThemeREX Addons CWE-79 7.1 High 2026-09-30
CVE-2026-62105 ThemeREX Addons 反序列化注入漏洞 — ThemeREX Addons CWE-502 9.8 Critical 2026-09-11
CVE-2026-65573 Themerex Abelle 反序列化注入漏洞 — Abelle CWE-502 9.8 Critical 2026-08-06
CVE-2026-57747 ThemeREX Booked 跨站请求伪造漏洞 — Booked CWE-352 6.5 Medium 2026-07-02
CVE-2026-57746 ThemeREX Booked 授权问题漏洞 — Booked CWE-862 7.1 High 2026-07-02
CVE-2025-69174 ThemeREX Etude 代码注入漏洞 — Etude CWE-98 8.1 High 2026-06-17
CVE-2025-69175 ThemeREX Line Agency 代码注入漏洞 — Line Agency CWE-98 8.1 High 2026-06-17

本页汇总了 ThemeREX 厂商截至目前公开的全部 210 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接，并附带 AI 生成的中文分析以便快速判断风险。