How many ThemeREX vapester CVEs are in CISA KEV?

None of ThemeREX vapester's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Are there public exploits for ThemeREX vapester vulnerabilities?

Yes — 1 of ThemeREX vapester's CVEs have a known public exploit.

Which versions of ThemeREX vapester are affected?

4 distinct ThemeREX vapester versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in ThemeREX vapester CVEs?

ThemeREX vapester's CVEs most often map to these CWE weakness types: CWE-98 (Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')).

How many critical ThemeREX vapester vulnerabilities are there?

ThemeREX vapester has 1 critical and 1 high-severity CVEs.

What is the average severity of ThemeREX vapester CVEs?

The average CVSS base score across ThemeREX vapester's scored CVEs is 8.9.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

ThemeREX

2 CVEs

ThemeREX vapester Vulnerabilities

Name: ThemeREX vapester vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for vapester by ThemeREX.

2

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

1

Public exploits

PoC or exploit code

8.9

Avg CVSS

2020–2026

Last updated March 5, 2026

Overview

ThemeREX vapester has 2 published CVE records since 2020, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 1 have a known public exploit. The average CVSS base score across scored CVEs is 8.9.

This page aggregates every publicly disclosed vulnerability (CVE) affecting ThemeREX vapester, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of ThemeREX vapester's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical1

High1

Medium0

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of ThemeREX vapester's CVEs are currently listed in CISA's KEV catalog.

Public exploits

1

One of ThemeREX vapester's CVEs has a known public exploit available.

Affected versions and CVEs

Browse every ThemeREX vapester version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

< 1.1.20011 CVE
<= 1.1.101 CVE

Fixed in

> 1.1.101 CVE
1.1.20011 CVE

Find a version

2 CVEs

Sort

WordPress Vapester theme <= 1.1.10 - Local File Inclusion vulnerability
CVE-2026-28077
Patch
CWE-98
High · CVSS 8.1
EPSS 0.4% (34th pct)2026-03-05
Critical vulnerability · 2020-03-09
CVE-2020-10257
Public exploit
Patch
Critical · CVSS 9.8
EPSS 8.9% (95th pct)2020-03-09

Common weakness types

The CWE weakness categories most often found in ThemeREX vapester CVEs. Follow any weakness for its full explanation.

CWE-98Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')1 CVE

Disclosure activity by year

How many ThemeREX vapester CVEs were published each year.

2020

1

2026

1

Other ThemeREX products

Browse vulnerabilities for other products by ThemeREX.

addons4 CVEs ThemeREX Addons4 CVEs puzzles3 CVEs Puzzles | WP Magazine / Review with Store WordPress Theme + RTL3 CVEs Booked2 CVEs gridiron2 CVEs Abelle1 CVEs AirSupply1 CVEs

All ThemeREX vulnerabilities

Frequently asked questions

Common questions about ThemeREX vapester vulnerabilities.

How many CVEs does ThemeREX vapester have?: ThemeREX vapester has 2 published CVE records since 2020.
How many ThemeREX vapester CVEs are in CISA KEV?: None of ThemeREX vapester's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for ThemeREX vapester vulnerabilities?: Yes — 1 of ThemeREX vapester's CVEs have a known public exploit.
Which versions of ThemeREX vapester are affected?: 4 distinct ThemeREX vapester versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in ThemeREX vapester CVEs?: ThemeREX vapester's CVEs most often map to these CWE weakness types: CWE-98 (Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')).
How many critical ThemeREX vapester vulnerabilities are there?: ThemeREX vapester has 1 critical and 1 high-severity CVEs.
What is the average severity of ThemeREX vapester CVEs?: The average CVSS base score across ThemeREX vapester's scored CVEs is 8.9.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track ThemeREX vapester vulnerabilities

Monitor new ThemeREX vapester vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing