Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

ThemeREX Addons — Vulnerabilities & Security Advisories 9

All 9 CVE vulnerabilities found in ThemeREX Addons, with AI-generated Chinese analysis, references, and POCs.

Vendor: ThemeREX

CVE ID Title CVSS Severity Published
CVE-2026-102797 WordPress ThemeREX Addons plugin <= 2.46.0 - Server Side Request Forgery (SSRF) vulnerability CWE-918 6.4 Medium 2026-10-02
CVE-2026-102798 WordPress ThemeREX Addons plugin <= 2.46.0 - Cross Site Scripting (XSS) vulnerability CWE-79 6.5 Medium 2026-10-02
CVE-2026-97236 WordPress ThemeREX Addons plugin < 2.45.0 - Cross Site Scripting (XSS) vulnerability CWE-79 6.5 Medium 2026-09-30
CVE-2026-97235 WordPress ThemeREX Addons plugin < 2.45.0 - Cross Site Scripting (XSS) vulnerability CWE-79 7.1 High 2026-09-30
CVE-2026-62105 WordPress ThemeREX Addons plugin < 2.45.0 - PHP Object Injection vulnerability CWE-502 9.8 Critical 2026-09-11
CVE-2025-60205 WordPress ThemeREX Addons plugin <= 2.36.1.1 - PHP Object Injection vulnerability CWE-502 9.8 Critical 2026-06-17
CVE-2025-6997 ThemeREX Addons <= 2.35.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via trx_addons_get_svg_from_file Function CWE-79 6.4 Medium 2025-07-19
CVE-2024-13448 ThemeREX Addons <= 2.32.3 - Unauthenticated Arbitrary File Upload in trx_addons_uploads_save_data CWE-434 9.8 Critical 2025-01-28
CVE-2025-0682 ThemeREX Addons <= 2.33.0 - Authenticated (Contributor+) Local File Inclusion via Shortcode CWE-98 8.8 High 2025-01-25

All 9 known CVE vulnerabilities affecting ThemeREX Addons with full Chinese analysis, references, and POCs where available.