Search Results (4 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-102798 2 Themerex, Wordpress-extensions 2 Themerex Addons, Theme Rex Addons 2026-10-04 6.5 Medium
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeREX Group ThemeREX Addons trx_addons allows Stored XSS.This issue affects ThemeREX Addons: from n/a through 2.46.0.
CVE-2026-102797 2 Themerex, Wordpress-extensions 2 Themerex Addons, Theme Rex Addons 2026-10-04 6.4 Medium
Server-Side Request Forgery (SSRF) vulnerability in ThemeREX Group ThemeREX Addons trx_addons allows Server Side Request Forgery.This issue affects ThemeREX Addons: from n/a through 2.46.0.
CVE-2026-62105 2 Themerex, Wordpress 2 Themerex Addons, Wordpress 2026-09-13 9.8 Critical
Unauthenticated PHP Object Injection in ThemeREX Addons < 2.45.0 versions.
CVE-2025-60205 2 Themerex, Wordpress 2 Themerex Addons, Wordpress 2026-06-20 9.8 Critical
Unauthenticated PHP Object Injection in ThemeREX Addons <= 2.36.1.1 versions.