Addons
ThemeREX · 4 CVEs
CVE-2025-6997
MEDIUM
ThemeREX Addons <= 2.35.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via trx_addons_get_svg_from_file…
Jul 19, 2025
CVE-2024-13448
CRITICAL
ThemeREX Addons <= 2.32.3 - Unauthenticated Arbitrary File Upload in trx_addons_uploads_save_data
Jan 28, 2025
CVE-2025-0682
HIGH
ThemeREX Addons <= 2.33.0 - Authenticated (Contributor+) Local File Inclusion via Shortcode
Jan 25, 2025
CVE-2020-10257
CRITICAL
The ThemeREX Addons plugin before 2020-03-09 for WordPress lacks access control on the /trx_addons/v2/get/sc_layout RES…
Mar 9, 2020
| CVE ID | Description | Severity | EPSS | Published |
|---|---|---|---|---|
| CVE-2025-6997 | ThemeREX Addons <= 2.35.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via trx_addons_get_svg_from_file Function | MEDIUM | 0.21% | Jul 19, 2025 |
| CVE-2024-13448 | ThemeREX Addons <= 2.32.3 - Unauthenticated Arbitrary File Upload in trx_addons_uploads_save_data | CRITICAL | 0.89% | Jan 28, 2025 |
| CVE-2025-0682 | ThemeREX Addons <= 2.33.0 - Authenticated (Contributor+) Local File Inclusion via Shortcode | HIGH | 0.62% | Jan 25, 2025 |
| CVE-2020-10257 | The ThemeREX Addons plugin before 2020-03-09 for WordPress lacks access control on the /trx_addons/v2/get/sc_layout REST API endpoint, allowing for PHP functio… | CRITICAL | 8.88% | Mar 9, 2020 |
Showing 1 to 4 of 4 CVEs