VendorsThemeREXaddonsany version
Vulnerabilities

ThemeREX Addons any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

3CVEs
CVE-2024-13448
ThemeREX Addons <= 2.32.3 - Unauthenticated Arbitrary File Upload in trx_addons_uploads_save_data
Published 2025-01-28 · Analyzed
9.8EPSS 0.009
CVE-2025-0682
ThemeREX Addons <= 2.33.0 - Authenticated (Contributor+) Local File Inclusion via Shortcode
Published 2025-01-25 · Analyzed
8.8EPSS 0.006
CVE-2025-6997
ThemeREX Addons <= 2.35.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via trx_addons_get_svg_from_file Function
Published 2025-07-19 · Analyzed
6.4EPSS 0.002