Themerex Addons vulnerabilities

• themerex addons WordPress ThemeREX Addons plugin <= 2.46.0 - Server Side Request Forgery (SSRF) vulnerability CVE-2026-102797 6.4 MediumOctober 2, 2026
• themerex addons WordPress ThemeREX Addons plugin <= 2.46.0 - Cross Site Scripting (XSS) vulnerability CVE-2026-102798 6.5 MediumOctober 2, 2026
• themerex addons WordPress ThemeREX Addons plugin < 2.45.0 - Cross Site Scripting (XSS) vulnerability CVE-2026-97236 6.5 MediumSeptember 30, 2026
• themerex addons WordPress ThemeREX Addons plugin < 2.45.0 - Cross Site Scripting (XSS) vulnerability CVE-2026-97235 7.1 HighSeptember 30, 2026
• themerex addons WordPress ThemeREX Addons plugin < 2.45.0 - PHP Object Injection vulnerability CVE-2026-62105 9.8 CriticalSeptember 11, 2026
• themerex addons WordPress ThemeREX Addons plugin <= 2.36.1.1 - PHP Object Injection vulnerability CVE-2025-60205 9.8 CriticalJune 17, 2026
• themerex addons ThemeREX Addons <= 2.35.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via trx_addons_get_svg_from_file Function CVE-2025-6997 6.4 MediumJuly 19, 2025
• themerex addons ThemeREX Addons <= 2.32.3 - Unauthenticated Arbitrary File Upload in trx_addons_uploads_save_data CVE-2024-13448 9.8 CriticalJanuary 28, 2025
• themerex addons ThemeREX Addons <= 2.33.0 - Authenticated (Contributor+) Local File Inclusion via Shortcode CVE-2025-0682 8.8 HighJanuary 25, 2025
• themerex addons, aldo-gutenberg wordpress blog theme, amuli +60 more +62 more The ThemeREX Addons plugin before 2020-03-09 for WordPress lacks access control on the ... CVE-2020-10257 Public exploit 9.8 CriticalMarch 9, 2020