ThemeREX

Everything Vector Bulletin has reported about ThemeREX: 2 stories, newest first. Part of our Vulnerabilities coverage.

Juno WordPress Theme Critical RCE Flaw: CVE-2026-62086 Allows Unauth Code Exec in v2.25

The NVD rates CVE-2026-62086 as critical. ThemeREX’s Juno theme allows remote code execution without credentials in versions up to 2.25.

Oct 11, 2026

The National Vulnerability Database has assigned a CVSS 9.8 score to an object injection vulnerability in the ThemeREX Gutentype WordPress plugin.

Oct 10, 2026