TA
Product
ThemeREX Addons
6
CVEs
0
On KEV
9.8
Max CVSS
2
New 30D
Severity mix
Critical 2High 2Medium 2Low 0
Watch
Add ThemeREX Addons to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-62105 | 9.8 | Sep 11 | WordPress ThemeREX Addons plugin < 2.45.0 - PHP Object Injection vulnerability Affected: before 2.45.0 |
| CVE-2024-13448 | 9.8 | Jan 28 | ThemeREX Addons <= 2.32.3 - Unauthenticated Arbitrary File Upload in trx_addons_uploads_save_data Affected: through 2.32.3 |
| CVE-2025-0682 | 8.8 | Jan 25 | ThemeREX Addons <= 2.33.0 - Authenticated (Contributor+) Local File Inclusion via Shortcode Affected: through 2.33.0 |
| CVE-2026-97235 | 7.1 | Sep 30 | WordPress ThemeREX Addons plugin < 2.45.0 - Cross Site Scripting (XSS) vulnerability Affected: before 2.45.0 |
| CVE-2026-97236 | 6.5 | Sep 30 | WordPress ThemeREX Addons plugin < 2.45.0 - Cross Site Scripting (XSS) vulnerability Affected: before 2.45.0 |
| CVE-2025-6997 | 5.4 | Jul 19 | ThemeREX Addons <= 2.35.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via trx_addons_get_svg_from_file Function Affected: through 2.35.1.1 |
Showing 6