AD
Product
Addons
4
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 1Medium 1Low 0
Watch
Add Addons to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-13448 | 9.8 | Jan 28 | The ThemeREX Addons plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'trx_addons_uploads_save_data' function in all versions… Affected: before 2.34.0 |
| CVE-2020-10257 | 9.8 | Mar 10 | The ThemeREX Addons plugin before 2020-03-09 for WordPress lacks access control on the /trx_addons/v2/get/sc_layout REST API endpoint, allowing for PHP functions to be executed by… Affected: 1.70.3; 1.70.3; 1.6.67; 1.6.66; 1.6.66; 1.6.65; +34 more |
Showing 2