Login Request a demo
AD
Product
Addons
by Themerex · last CVE Jul 19, 2025
4
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities4In the news0Timeline
Severity mix
Critical 2High 1Medium 1Low 0
Severity
All severities4Critical2High1Medium1Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Addons to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-13448
9.8
1%
Jan 28
The ThemeREX Addons plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'trx_addons_uploads_save_data' function in all versions…
Affected: before 2.34.0
CVE-2020-10257
9.8
9%
Mar 10
The ThemeREX Addons plugin before 2020-03-09 for WordPress lacks access control on the /trx_addons/v2/get/sc_layout REST API endpoint, allowing for PHP functions to be executed by…
Affected: 1.70.3; 1.70.3; 1.6.67; 1.6.66; 1.6.66; 1.6.65; +34 more
CVE-2025-0682
8.8
1%
Jan 25
The ThemeREX Addons plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.33.0 via the 'trx_sc_reviews' shortcode 'type' attribute
Affected: before 2.34.0
CVE-2025-6997
5.4
0%
Jul 19
The ThemeREX Addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 2.35.1.1 due to insufficient input…
Affected: before 2.35.2.2
Showing 4