RexTheme vulnerabilities
17 published CVEs name RexTheme among the affected products.
- 17Published CVEs17 of them scored
- 5Last 12 monthspublished in the last year
- 1Critical6 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-118089
WordPress Product Feed Manager plugin <= 7.14.1 - PHP Object Injection vulnerability
RexTheme · Product Feed Manager
High7.2 - CVE-2026-66580
WordPress Product Feed Manager plugin <= 7.12.0 - SQL Injection vulnerability
RexTheme · Product Feed Manager
High8.5 - CVE-2026-59553
WordPress Product Feed Manager plugin <= 7.6.1 - Cross Site Scripting (XSS) vulnerability
RexTheme · Product Feed Manager
High7.1 - CVE-2026-15306
Product Feed Manager For WooCommerce <= 7.6.1 - Reflected Cross-Site Scripting via 's' Search Parameter
rextheme · Product Feed Manager For WooCommerce – Sell on 200+ Online Marketplaces
Medium6.1 - CVE-2026-57417
WordPress Cart Lift plugin <= 3.1.57 - Cross Site Scripting (XSS) vulnerability
RexTheme · Cart Lift
High7.1 - CVE-2025-62885
WordPress WP VR plugin <= 8.5.48 - Cross Site Scripting (XSS) vulnerability
RexTheme · WP VR
Medium6.5 - CVE-2025-12005
WP VR – 360 Panorama and Free Virtual Tour Builder For WordPress <= 8.5.41 - Improper Authorization to Authenticated (Contributor+) Plugin Settings Update
rextheme · WP VR – 360 Panorama and Free Virtual Tour Builder For WordPress
Medium4.3 - CVE-2025-6350
WP VR – 360 Panorama and Free Virtual Tour Builder For WordPress <= 8.5.32 - Authenticated (Contributor+) Stored Cross-Site Scripting
rextheme · WP VR – 360 Panorama and Free Virtual Tour Builder For WordPress
Medium6.4 - CVE-2025-47452
WordPress WP VR plugin <= 8.5.26 - Arbitrary File Upload Vulnerability
RexTheme · WP VR
Critical9.9 - CVE-2025-24730
WordPress WP VR plugin <= 8.5.14 - Cross Site Scripting (XSS) vulnerability
RexTheme · WP VR
Medium6.5