WordPress Themerex Addons Vulnerabilities

Wordpress Themerex Addons vulnerabilities.

JSON RSS CSV 🔔 Create Alert Trigger

2 October 2026

Server-Side Request Forgery Vulnerability in ThemeREX Addons by ThemeREX Group
CVE-2026-102797
WordPressThemerex Addons6.4MEDIUM
Cross-site Scripting Vulnerability in ThemeREX Addons by ThemeREX Group
CVE-2026-102798
WordPressThemerex Addons6.5MEDIUM

30 September 2026

Cross-Site Scripting Vulnerability in ThemeREX Addons by WordPress
CVE-2026-97236
WordPressThemerex Addons6.5MEDIUM
Unauthenticated Cross Site Scripting in ThemeREX Addons by ThemeREX
CVE-2026-97235
WordPressThemerex Addons7.1HIGH

11 September 2026

Unauthenticated PHP Object Injection in ThemeREX Addons by ThemeREX
CVE-2026-62105
WordPressThemerex Addons9.8CRITICAL

17 June 2026

PHP Object Injection Vulnerability in ThemeREX Addons by ThemeREX
CVE-2025-60205
WordPressThemerex Addons9.8CRITICAL

19 July 2025

Stored Cross-Site Scripting Vulnerability in ThemeREX Addons for WordPress
CVE-2025-6997
WordPressThemerex Addons6.4MEDIUM

28 January 2025

Arbitrary File Upload Vulnerability in ThemeREX Addons Plugin for WordPress
CVE-2024-13448
WordPressThemerex Addons9.8CRITICAL

25 January 2025

Local File Inclusion Vulnerability in ThemeREX Addons Plugin for WordPress
CVE-2025-0682
WordPressThemerex Addons8.8HIGH