532 matches found
ThemeREX Addons - Remote Code Execution
ThemeREX Addons plugin before 2020-03-09 for WordPress contains an access control vulnerability in the /trxaddons/v2/get/sclayout REST API endpoint, allowing any users to execute PHP functions because includes/plugin.rest-api.php calls trxaddonsrestgetsclayout with an unsafe sc parameter, letting...
CVE-2026-102798
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ThemeREX Group ThemeREX Addons trxaddons allows Stored XSS.This issue affects ThemeREX Addons: from n/a through 2.46.0...
CVE-2026-102797
Server-Side Request Forgery SSRF vulnerability in ThemeREX Group ThemeREX Addons trxaddons allows Server Side Request Forgery.This issue affects ThemeREX Addons: from n/a through 2.46.0...
CVE-2026-102797 WordPress ThemeREX Addons plugin <= 2.46.0 - Server Side Request Forgery (SSRF) vulnerability
Server-Side Request Forgery SSRF vulnerability in ThemeREX Group ThemeREX Addons trxaddons allows Server Side Request Forgery.This issue affects ThemeREX Addons: from n/a through 2.46.0...
CVE-2026-102797
The ThemeREX Addons plugin for WordPress (versions
EUVD-2026-91590
Server-Side Request Forgery SSRF vulnerability in ThemeREX Group ThemeREX Addons trxaddons allows Server Side Request Forgery.This issue affects ThemeREX Addons: from n/a through 2.46.0...
WordPress ThemeREX Addons plugin <= 2.46.0 - Server Side Request Forgery (SSRF) vulnerability
Server Side Request Forgery SSRF vulnerability discovered by nh4tvd in WordPress Plugin ThemeREX Addons versions = 2.46.0...
CVE-2026-102798 WordPress ThemeREX Addons plugin <= 2.46.0 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ThemeREX Group ThemeREX Addons trxaddons allows Stored XSS.This issue affects ThemeREX Addons: from n/a through 2.46.0...
EUVD-2026-91589
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ThemeREX Group ThemeREX Addons trxaddons allows Stored XSS.This issue affects ThemeREX Addons: from n/a through 2.46.0...
CVE-2026-102798
The ThemeREX Addons (trx_addons) WordPress plugin, from version n/a through 2.46.0 , is vulnerable to a Stored Cross-site Scripting (XSS) flaw. This issue is caused by the improper neutralization of input during web page generation, which could allow an attacker to inject and execute malicious sc...
WordPress ThemeREX Addons plugin <= 2.46.0 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by nh4tvd in WordPress Plugin ThemeREX Addons versions = 2.46.0...
CVE-2026-97236
Subscriber Cross Site Scripting XSS in ThemeREX Addons 2.45.0 versions...
CVE-2026-97235
Unauthenticated Cross Site Scripting XSS in ThemeREX Addons 2.45.0 versions...
EUVD-2026-89900
Subscriber Cross Site Scripting XSS in ThemeREX Addons 2.45.0 versions...
CVE-2026-97236
The WordPress ThemeREX Addons plugin, in versions
CVE-2026-97236 WordPress ThemeREX Addons plugin < 2.45.0 - Cross Site Scripting (XSS) vulnerability
Subscriber Cross Site Scripting XSS in ThemeREX Addons 2.45.0 versions...
CVE-2026-97236 WordPress ThemeREX Addons plugin < 2.45.0 - Cross Site Scripting (XSS) vulnerability
Subscriber Cross Site Scripting XSS in ThemeREX Addons 2.45.0 versions...
EUVD-2026-89899
Unauthenticated Cross Site Scripting XSS in ThemeREX Addons 2.45.0 versions...