Vulnerabilities
ThemeREX IPharm Deserialization Flaw Exposes Sites to Object Injection
A critical vulnerability in ThemeREX IPharm versions up to 1.2.4 allows untrusted data deserialization, posing a severe risk to WordPress installations.
ThemeREX
Everything Phish Herald has reported about ThemeREX: 2 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
Orgs hit by CVSS 9.8: Patch ThemeREX Tantra CMS to block object injection
Security teams must patch ThemeREX Tantra CMS versions up to 2.9.0 immediately to mitigate a critical deserialization vulnerability.