Login Request a demo
AD
Product
Addons
by Themerex · last CVE Jul 19, 2025
4
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities4In the news0Timeline
Severity mix
Critical 2High 1Medium 1Low 0
Severity
All severities4Critical2High1Medium1Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Addons to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-13448
9.8
1%
Jan 28
ThemeREX Addons <= 2.32.3 - Unauthenticated Arbitrary File Upload in trx_addons_uploads_save_data
Affected: before 2.34.0
CVE-2020-10257
9.8
9%
Mar 10
The ThemeREX Addons plugin before 2020-03-09 for WordPress lacks access control on the /trx_addons/v2/get/sc_layout REST API endpoint, allowing for PHP functions to be executed by…
Affected: 1.70.3; 1.70.3; 1.6.67; 1.6.66; 1.6.66; 1.6.65; +34 more
CVE-2025-0682
8.8
1%
Jan 25
ThemeREX Addons <= 2.33.0 - Authenticated (Contributor+) Local File Inclusion via Shortcode
Affected: before 2.34.0
CVE-2025-6997
5.4
0%
Jul 19
ThemeREX Addons <= 2.35.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via trx_addons_get_svg_from_file Function
Affected: before 2.35.2.2
Showing 4