ThemeREX Group
Vulnerability activity for ThemeREX Group: what is being exploited, what was published lately, and when the next patch release is due.
Last 30 days
- CVEs
- 5
- Critical (CVSS 9+)
- 4
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Last 90 days
- CVEs
- 5
- Critical (CVSS 9+)
- 4
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Last 365 days
- CVEs
- 5
- Critical (CVSS 9+)
- 4
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Exploited now
None of this vendor's CVEs are on CISA's known-exploited list.
Recent
- 9.8CriticalOct 23, 2026ThemeREX Group Little Birdies DeserializationCVE-2026-112859Deserialization of Untrusted Data vulnerability in ThemeREX Group Little Birdies little-birdies allows Object Injection.This issue affects Little Birdies: from n/a through 1.3.16.
- 9.8CriticalOct 23, 2026ThemeREX Group Vagabonds DeserializationCVE-2026-112856Deserialization of Untrusted Data vulnerability in ThemeREX Group Vagabonds vagabonds allows Object Injection.This issue affects Vagabonds: from n/a through 1.3.10.
- 8.1HighOct 23, 2026ThemeREX Group Helion DeserializationCVE-2026-112852Deserialization of Untrusted Data vulnerability in ThemeREX Group Helion helion allows Object Injection.This issue affects Helion: from n/a through 1.1.12.
- 9.8CriticalOct 23, 2026ThemeREX Group HotLock DeserializationCVE-2026-112851Deserialization of Untrusted Data vulnerability in ThemeREX Group HotLock hotlock allows Object Injection.This issue affects HotLock: from n/a through 1.3.9.
- 9.8CriticalOct 23, 2026ThemeREX Group Save Life DeserializationCVE-2026-112846Deserialization of Untrusted Data vulnerability in ThemeREX Group Save Life save-life allows Object Injection.This issue affects Save Life: from n/a through 1.2.14.
Top products
- Vagabonds1 CVE in the last year, 1 critical
- Save Life1 CVE in the last year, 1 critical
- Little Birdies1 CVE in the last year, 1 critical
- HotLock1 CVE in the last year, 1 critical
- Helion1 CVE in the last year
Counts cover CVEs and advisories Watch Floor tracks, by the date they became news. Updated every 10 minutes.