Advisories · Technology

ThemeREX Legal Stone.

Every CVE that names ThemeREX Legal Stone among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-61997 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

WordPress Legal Stone theme <= 1.2.11 - PHP Object Injection vulnerability
- ThemeREX Legal Stone
- Insecure deserialization
Not analysed yet 29 Oct 2026
CVE-2026-28054 CVE record

CVSS 8.1 High

WordPress Legal Stone theme <= 1.2.11 - Local File Inclusion vulnerability
- ThemeREX Legal Stone
- File inclusion
Not analysed yet 5 Mar 2026