Known vulnerabilities in ThemeREX WineShop
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-62090 | Unauthenticated PHP Object Injection in WineShop <= 3.20 versions | 9.8 Critical | Oct 10, 2026 |
| CVE-2025-69163 | Unauthenticated Local File Inclusion in WineShop <= 3.17 versions | 8.1 High | Jun 16, 2026 |