Login Request a demo
TA
Product
ThemeREX Addons
by ThemeRex · last CVE Sep 30, 2026
6
CVEs
0
On KEV
9.8
Max CVSS
2
New 30D
Vulnerabilities6In the news0Timeline
Severity mix
Critical 2High 2Medium 2Low 0
Severity
All severities6Critical2High2Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add ThemeREX Addons to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-97236
6.5
0%
Sep 30
WordPress ThemeREX Addons plugin < 2.45.0 - Cross Site Scripting (XSS) vulnerability
Affected: before 2.45.0
CVE-2025-6997
5.4
0%
Jul 19
ThemeREX Addons <= 2.35.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via trx_addons_get_svg_from_file Function
Affected: through 2.35.1.1
Showing 2