VendorsThemeREXpuzzlesany version
Vulnerabilities

ThemeREX Puzzles any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

3CVEs
CVE-2024-13770
Puzzles | WP Magazine / Review with Store WordPress Theme + RTL <= 4.2.4 - Unauthenticated PHP Object Injection
Published 2025-02-13 · Analyzed
9.8EPSS 0.008
CVE-2024-13769
Puzzles | WP Magazine / Review with Store WordPress Theme + RTL <= 4.2.4 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting
Published 2025-02-12 · Analyzed
6.4EPSS 0.003
CVE-2025-0837
Puzzles <= 4.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Published 2025-02-13 · Modified
6.4EPSS 0.003