Search Results (185 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-102798 2 Themerex, Wordpress-extensions 2 Themerex Addons, Theme Rex Addons 2026-10-04 6.5 Medium
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeREX Group ThemeREX Addons trx_addons allows Stored XSS.This issue affects ThemeREX Addons: from n/a through 2.46.0.
CVE-2026-102797 2 Themerex, Wordpress-extensions 2 Themerex Addons, Theme Rex Addons 2026-10-04 6.4 Medium
Server-Side Request Forgery (SSRF) vulnerability in ThemeREX Group ThemeREX Addons trx_addons allows Server Side Request Forgery.This issue affects ThemeREX Addons: from n/a through 2.46.0.
CVE-2026-62105 2 Themerex, Wordpress 2 Themerex Addons, Wordpress 2026-09-13 9.8 Critical
Unauthenticated PHP Object Injection in ThemeREX Addons < 2.45.0 versions.
CVE-2026-66650 2 Themerex, Wordpress 2 Freightco, Wordpress 2026-08-24 9.8 Critical
Unauthenticated PHP Object Injection in FreightCo <= 1.1.15 versions.
CVE-2026-65573 2 Themerex, Wordpress 2 Abelle, Wordpress 2026-08-06 9.8 Critical
Unauthenticated PHP Object Injection in Abelle <= 1.22 versions.
CVE-2025-69105 2 Themerex, Wordpress 2 Modernee, Wordpress 2026-06-26 8.1 High
Unauthenticated Local File Inclusion in Modernee <= 1.6.0 versions.
CVE-2025-69112 2 Themerex, Wordpress 2 Planty, Wordpress 2026-06-26 8.1 High
Unauthenticated Local File Inclusion in Planty <= 1.14.0 versions.
CVE-2025-69113 2 Themerex, Wordpress 2 Nexio, Wordpress 2026-06-26 8.1 High
Unauthenticated Local File Inclusion in Nexio <= 1.10.0 versions.
CVE-2025-69114 2 Themerex, Wordpress 2 Maxinet, Wordpress 2026-06-26 8.1 High
Unauthenticated Local File Inclusion in MaxiNet <= 1.2.10 versions.
CVE-2025-69116 2 Themerex, Wordpress 2 Iona, Wordpress 2026-06-26 8.1 High
Unauthenticated Local File Inclusion in Iona <= 1.0.8 versions.
CVE-2025-69118 2 Themerex, Wordpress 2 Copypress, Wordpress 2026-06-26 8.1 High
Unauthenticated Local File Inclusion in CopyPress <= 1.4.5 versions.
CVE-2025-69124 2 Themerex, Wordpress 2 Especio, Wordpress 2026-06-26 8.1 High
Unauthenticated Local File Inclusion in Especio <= 1.0 versions.
CVE-2025-69142 2 Themerex, Wordpress 2 Abelle, Wordpress 2026-06-26 8.1 High
Unauthenticated Local File Inclusion in Abelle <= 1.22 versions.
CVE-2025-69143 2 Themerex, Wordpress 2 Mission, Wordpress 2026-06-26 8.1 High
Unauthenticated Local File Inclusion in Mission <= 1.22 versions.
CVE-2025-69146 2 Themerex, Wordpress 2 Dom, Wordpress 2026-06-26 8.1 High
Unauthenticated Local File Inclusion in Dom <= 1.24 versions.
CVE-2025-69147 2 Themerex, Wordpress 2 Putter, Wordpress 2026-06-26 8.1 High
Unauthenticated Local File Inclusion in Putter <= 1.17 versions.
CVE-2025-69150 2 Themerex, Wordpress 2 Medeus, Wordpress 2026-06-26 8.1 High
Unauthenticated Local File Inclusion in Medeus <= 1.14 versions.
CVE-2025-69159 2 Themerex, Wordpress 2 Printo, Wordpress 2026-06-26 8.1 High
Unauthenticated Local File Inclusion in Printo <= 1.11 versions.
CVE-2025-69160 2 Themerex, Wordpress 2 Gita, Wordpress 2026-06-26 8.1 High
Unauthenticated Local File Inclusion in Gita <= 1.11 versions.
CVE-2025-69162 2 Themerex, Wordpress 2 Grecko, Wordpress 2026-06-26 8.1 High
Unauthenticated Local File Inclusion in Grecko <= 5.17 versions.