Advisories · Technology

ThemeREX RexCoin.

Every CVE that names ThemeREX RexCoin among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-54856 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

WordPress RexCoin theme <= 1.2.6 - PHP Object Injection vulnerability
- ThemeREX RexCoin
- Insecure deserialization
Not analysed yet 29 Oct 2026
CVE-2026-28094 CVE record

CVSS 8.1 High

WordPress RexCoin theme <= 1.2.6 - Local File Inclusion vulnerability
- ThemeREX RexCoin
- File inclusion
Not analysed yet 5 Mar 2026