Login Request a demo
TA
Product
ThemeREX Addons
by ThemeREX Group · last CVE Oct 2, 2026
3
CVEs
0
On KEV
9.8
Max CVSS
2
New 30D
Vulnerabilities3In the news0Timeline
Severity mix
Critical 1High 0Medium 2Low 0
Severity
All severities3Critical1High0Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add ThemeREX Addons to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-60205
9.8
1%
Jun 17
WordPress ThemeREX Addons plugin <= 2.36.1.1 - PHP Object Injection vulnerability
Affected: through 2.36.1.1
CVE-2026-102798
6.5
0%
Oct 2
WordPress ThemeREX Addons plugin <= 2.46.0 - Cross Site Scripting (XSS) vulnerability
Affected: through 2.46.0
CVE-2026-102797
6.4
0%
Oct 2
WordPress ThemeREX Addons plugin <= 2.46.0 - Server Side Request Forgery (SSRF) vulnerability
Affected: through 2.46.0
Showing 3