1
CVEs
1
Critical
0
High
0
KEV
0
PoC
0
Unpatched C/H
100.0%
Patch Rate
0.3%
Avg EPSS
Severity Breakdown
CRITICAL
1
HIGH
0
MEDIUM
0
LOW
0
Monthly CVE Trend
Affected Products (30)
PHP
67
Wordpress Theme
65
Wordpress Plugin
4
Addons
3
Puzzles
3
Booked
2
Abelle
2
Themerex Addons
2
Modernee
1
Wellspring Water Filter Systems
1
Buisson
1
Prolingua
1
Wineshop
1
Choreo
1
Nelson
1
Ozeum Museum
1
Gunslinger
1
Kelly Young
1
Piqes Creative Startup Agency Wordpress Theme
1
Savejulia Personal Fundraising Campaign
1
Tediss Soft Play Area Cafe Child Care Center
1
Resurs
1
Pixefy
1
Gridiron
1
Bugster Pests Control
1
Nexio
1
Skydiving And Flying Company
1
Kratz Digital Agency
1
Copypress
1
Nazareth Church
1
Top Risky CVEs
| CVE | Summary | Severity | CVSS | EPSS | Priority | Signals |
|---|---|---|---|---|---|---|
| CVE-2026-62105 | Unauthenticated PHP Object Injection in the ThemeREX Addons (trx_addons) WordPress plugin before 2.45.0 lets remote attackers inject arbitrary serialized PHP objects into the application. Because no authentication is required (CVSS 9.8, PR:N/UI:N), an attacker can supply crafted serialized data to a vulnerable entry point; when combined with a suitable POP gadget chain present in the plugin, another plugin, a theme, or WordPress core, this can escalate to code execution, arbitrary file operations, or data compromise. Reported by Patchstack; no public exploit identified at time of analysis and it is not listed in CISA KEV. | CRITICAL | 9.8 | 0.3% | 49 |
|