ThemeREX ThemeREX Addons vulnerabilities
6 published CVEs name ThemeREX ThemeREX Addons among the affected products.
- 6Published CVEs6 of them scored
- 3Last 12 monthspublished in the last year
- 2Critical2 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-97236
WordPress ThemeREX Addons plugin < 2.45.0 - Cross Site Scripting (XSS) vulnerability
ThemeRex · ThemeREX Addons
Medium6.5 - CVE-2026-97235
WordPress ThemeREX Addons plugin < 2.45.0 - Cross Site Scripting (XSS) vulnerability
ThemeRex · ThemeREX Addons
High7.1 - CVE-2026-62105
WordPress ThemeREX Addons plugin < 2.45.0 - PHP Object Injection vulnerability
ThemeRex · ThemeREX Addons
Critical9.8 - CVE-2025-6997
ThemeREX Addons <= 2.35.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via trx_addons_get_svg_from_file Function
ThemeREX · ThemeREX Addons
Medium6.4 - CVE-2024-13448
ThemeREX Addons <= 2.32.3 - Unauthenticated Arbitrary File Upload in trx_addons_uploads_save_data
ThemeREX · ThemeREX Addons
Critical9.8 - CVE-2025-0682
ThemeREX Addons <= 2.33.0 - Authenticated (Contributor+) Local File Inclusion via Shortcode
ThemeREX · ThemeREX Addons
High8.8