Everything SecOps Signal has reported about ThemeREX Group: 3 stories, newest first. Part of our Vulnerabilities coverage.
A critical deserialization flaw in ThemeREX Group’s Convex plugin allows object injection, affecting all versions up to 1.16.0 with a CVSS score of 9.8.
An unauthenticated object injection vulnerability in the Booklovers WordPress theme allows remote attackers to exploit deserialization flaws in versions up to 2.13.0.
A critical vulnerability in Smart Casa allows object injection, posing severe risks to small businesses using versions up to 1.0.12.