RexTheme vulnerabilities
We track 2 vulnerabilities in RexTheme products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on July 13, 2026.
2vulnerabilities
1critical
1high
0exploited
8.5average CVSS score
Latest RexTheme vulnerabilities
- 7.1 High severity
Cart Lift: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RexTheme Cart Lift cart-lift allows Stored XSS.This issue affects Cart Lift: from n/a through <= 3.1.57.
- 9.9 Critical severity
WP VR: Unrestricted Upload of File with Dangerous Type
Unrestricted Upload of File with Dangerous Type vulnerability in RexTheme WP VR wpvr allows Upload a Web Shell to a Web Server.This issue affects WP VR: from n/a through <= 8.5.26.