CVE-2026-62105 Unauthenticated PHP Object Injection in ThemeREX Addons < 2.45.0 versions

Description

Unauthenticated PHP Object Injection in ThemeREX Addons < 2.45.0 versions.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
ThemeREX Addons 2.45	premières → < 2.45.0	2.45.0

Autres CVE de ThemeREX Addons

Les 7 CVE de ThemeREX Addons →

CVE-2026-97236 Subscriber Cross Site Scripting (XSS) in ThemeREX Addons < 2.45.0 versions 6.5 Moyenne CVE-2026-97235 Unauthenticated Cross Site Scripting (XSS) in ThemeREX Addons < 2.45.0 versions 7.1 Élevée CVE-2025-60205 Deserialization of Untrusted Data vulnerability in ThemeREX Group ThemeREX Addons trx_addons allows Object… 9.8 Critique CVE-2025-6997 The ThemeREX Addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all… 6.4 Moyenne