ThemeREX Edge Decor

2 published vulnerabilities name this product.

As the CNAs write it in their CVE records (vendor and product); the versions are theirs.

CVEVulnerable versionsTitleSeverityPublishedEPSSExploitation
CVE-2026-62013n/a – 2.9WordPress Edge Decor theme <= 2.9 - PHP Object Injection vulnerabilityCRITICAL 9.80.4 %
CVE-2026-28064≤ 2.2WordPress Edge Decor theme <= 2.2 - Local File Inclusion vulnerabilityHIGH 8.10.5 %