ThemeREX ThemeREX Addons

• CVE-2026-97236 Medium 6.5 WordPress ThemeREX Addons plugin < 2.45.0 - Cross Site Scripting (XSS) vulnerability 0.2%
• CVE-2026-97235 High 7.1 WordPress ThemeREX Addons plugin < 2.45.0 - Cross Site Scripting (XSS) vulnerability 0.2%
• CVE-2026-62105 Critical 9.8 WordPress ThemeREX Addons plugin < 2.45.0 - PHP Object Injection vulnerability 0.6%
• CVE-2025-6997 Medium 6.4 ThemeREX Addons <= 2.35.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via trx_addons_get_svg_from_file Function 0.2%
• CVE-2024-13448 Critical 9.8 ThemeREX Addons <= 2.32.3 - Unauthenticated Arbitrary File Upload in trx_addons_uploads_save_data 0.9%
• CVE-2025-0682 High 8.8 ThemeREX Addons <= 2.33.0 - Authenticated (Contributor+) Local File Inclusion via Shortcode 0.6%