ThemeREX Le Truffe

2 published vulnerabilities name this product.

As the CNAs write it in their CVE records (vendor and product); the versions are theirs.

CVEVulnerable versionsTitleSeverityPublishedEPSSExploitation
CVE-2026-61998n/a – 1.1.7WordPress Le Truffe theme <= 1.1.7 - PHP Object Injection vulnerabilityCRITICAL 9.80.5 %
CVE-2026-28069≤ 1.1.7WordPress Le Truffe theme <= 1.1.7 - Local File Inclusion vulnerabilityHIGH 8.10.4 %