ThemeREX Orpheus

2 published vulnerabilities name this product.

As the CNAs write it in their CVE records (vendor and product); the versions are theirs.

CVEVulnerable versionsTitleSeverityPublishedEPSSExploitation
CVE-2026-62008n/a – 1.8WordPress Orpheus theme <= 1.8 - PHP Object Injection vulnerabilityCRITICAL 9.80.4 %
CVE-2025-69171n/a – 1.3WordPress Orpheus theme <= 1.3 - Local File Inclusion vulnerabilityHIGH 8.10.3 %