Known vulnerabilities in ThemeREX Addons
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-62105 | Unauthenticated PHP Object Injection in ThemeREX Addons < 2.45.0 versions | 9.8 Critical | Sep 11, 2026 |
| CVE-2025-60205 | Deserialization of Untrusted Data vulnerability in ThemeREX Group ThemeREX Addons trx_addons allows Object… | 9.8 Critical | Jun 17, 2026 |
| CVE-2024-13448 | The ThemeREX Addons plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation… | 9.8 Critical | Jan 28, 2025 |