What’s Vulnerable › Products

ThemeREX Addons vulnerabilities

7 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 6 published in the last 12 months.

Check whether your ThemeREX Addons version is affected

Latest ThemeREX Addons vulnerabilities

• CVE-2026-97236 — WordPress ThemeREX Addons plugin < 2.45.0 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
• CVE-2026-97235 — WordPress ThemeREX Addons plugin < 2.45.0 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
• CVE-2026-62105 — WordPress ThemeREX Addons plugin < 2.45.0 - PHP Object Injection vulnerability (CVSS 9.8)
• CVE-2025-6997 — ThemeREX Addons <= 2.35.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via trx_addons_get_svg_from_file Function (CVSS 5.4)
• CVE-2024-13448 — ThemeREX Addons <= 2.32.3 - Unauthenticated Arbitrary File Upload in trx_addons_uploads_save_data (CVSS 9.8)
• CVE-2025-0682 — ThemeREX Addons <= 2.33.0 - Authenticated (Contributor+) Local File Inclusion via Shortcode (CVSS 8.8)
• CVE-2020-10257 — (CVSS 9.8)