目標達成 すべての支援者に感謝 — 100%達成しました!

目標: 1000 CNY · 調達済み: 1000 CNY

100.0%

ThemeREX 厂商漏洞列表 / CVE 中文分析 125

ThemeREX 厂商相关 125 条 CVE 漏洞,含 AI 中文分析、POC、CVSS 评分与受影响产品。

ThemeREX 主要开发 WordPress 主题与插件,其核心产品如 Avada 等广泛用于网站构建。截至最新统计,该厂商已收录 125 条 CVE,历史漏洞多集中于远程代码执行、跨站脚本及越权访问,常因输入验证缺失或配置不当引发。其部分插件曾曝出未授权访问风险,导致数据泄露。建议用户及时更新组件,严格遵循最小权限原则,以缓解潜在的安全威胁。

CVE IDタイトルCVSS深刻度公開日
CVE-2026-28066 WordPress Legrand theme <= 2.17 - Local File Inclusion vulnerability — LegrandCWE-98 8.1 High2026-03-05
CVE-2026-28068 WordPress Rhythmo theme <= 1.3.4 - Local File Inclusion vulnerability — RhythmoCWE-98 8.1 High2026-03-05
CVE-2026-28065 WordPress Eject theme <= 2.17 - Local File Inclusion vulnerability — EjectCWE-98 8.1 High2026-03-05
CVE-2026-28069 WordPress Le Truffe theme <= 1.1.7 - Local File Inclusion vulnerability — Le TruffeCWE-98 8.1 High2026-03-05
CVE-2026-28062 WordPress Happy Baby theme <= 1.2.12 - Local File Inclusion vulnerability — Happy BabyCWE-98 8.1 High2026-03-05
CVE-2026-28060 WordPress S.King theme <= 1.5.3 - Local File Inclusion vulnerability — S.KingCWE-98 8.1 High2026-03-05
CVE-2026-28061 WordPress Tiger Claw theme <= 1.1.14 - Local File Inclusion vulnerability — Tiger ClawCWE-98 8.1 High2026-03-05
CVE-2026-28063 WordPress Asia Garden theme <= 1.3.1 - Local File Inclusion vulnerability — Asia GardenCWE-98 8.1 High2026-03-05
CVE-2026-28064 WordPress Edge Decor theme <= 2.2 - Local File Inclusion vulnerability — Edge DecorCWE-98 8.1 High2026-03-05
CVE-2026-28055 WordPress M.Williamson theme <= 1.2.11 - Local File Inclusion vulnerability — M.WilliamsonCWE-98 8.1 High2026-03-05
CVE-2026-28057 WordPress Mandala theme <= 2.8 - Local File Inclusion vulnerability — MandalaCWE-98 8.1 High2026-03-05
CVE-2026-28059 WordPress Dermatology Clinic theme <= 1.4.3 - Local File Inclusion vulnerability — Dermatology ClinicCWE-98 8.1 High2026-03-05
CVE-2026-28056 WordPress MCKinney's Politics theme <= 1.2.8 - Local File Inclusion vulnerability — MCKinney's PoliticsCWE-98 8.1 High2026-03-05
CVE-2026-28058 WordPress Dixon theme <= 1.4.2.1 - Local File Inclusion vulnerability — DixonCWE-98 8.1 High2026-03-05
CVE-2026-28054 WordPress Legal Stone theme <= 1.2.11 - Local File Inclusion vulnerability — Legal StoneCWE-98 8.1 High2026-03-05
CVE-2026-28052 WordPress Peter Mason theme <= 1.4.5 - Local File Inclusion vulnerability — Peter MasonCWE-98 8.1 High2026-03-05
CVE-2026-28053 WordPress Miller theme <= 1.3.3 - Local File Inclusion vulnerability — MillerCWE-98 8.1 High2026-03-05
CVE-2026-28051 WordPress Yacht Rental theme <= 2.6 - Local File Inclusion vulnerability — Yacht RentalCWE-98 8.1 High2026-03-05
CVE-2026-28050 WordPress Beacon theme <= 2.24 - Local File Inclusion vulnerability — BeaconCWE-98 8.1 High2026-03-05
CVE-2026-28046 WordPress Law Office theme <= 3.3.0 - Local File Inclusion vulnerability — Law OfficeCWE-98 8.1 High2026-03-05
CVE-2026-28049 WordPress Police Department theme <= 2.17 - Local File Inclusion vulnerability — Police DepartmentCWE-98 8.1 High2026-03-05
CVE-2026-28045 WordPress N7 | Golf Club Sports & Events theme <= 2.16.0 - Local File Inclusion vulnerability — N7 | Golf Club Sports & EventsCWE-98 8.1 High2026-03-05
CVE-2026-28043 WordPress Healer - Doctor, Clinic & Medical WordPress Theme theme <= 1.0.0 - Local File Inclusion vulnerability — Healer - Doctor, Clinic & Medical WordPress ThemeCWE-98 9.8 Critical2026-03-05
CVE-2026-28033 WordPress Edifice theme <= 1.8 - Local File Inclusion vulnerability — EdificeCWE-98 8.1 High2026-03-05
CVE-2026-28034 WordPress Progress theme <= 1.2 - Local File Inclusion vulnerability — ProgressCWE-98 8.1 High2026-03-05
CVE-2026-28035 WordPress Printy theme <= 1.8 - Local File Inclusion vulnerability — PrintyCWE-98 8.1 High2026-03-05
CVE-2026-28030 WordPress Bonbon theme <= 1.6 - Local File Inclusion vulnerability — BonbonCWE-98 8.1 High2026-03-05
CVE-2026-28031 WordPress Invetex theme <= 2.18 - Local File Inclusion vulnerability — InvetexCWE-98 8.1 High2026-03-05
CVE-2026-28032 WordPress Tuning theme <= 1.3 - Local File Inclusion vulnerability — TuningCWE-98 8.1 High2026-03-05
CVE-2026-28027 WordPress Kayon theme <= 1.3 - Local File Inclusion vulnerability — KayonCWE-98 8.1 High2026-03-05

本页汇总了 ThemeREX 厂商截至目前公开的全部 125 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接,并附带 AI 生成的中文分析以便快速判断风险。