CVE-2026-97236 WordPress ThemeREX Addons plugin < 2.45.0 - Cross Site Scripting (XSS) vulnerability

Subscriber Cross Site Scripting XSS in ThemeREX Addons 2.45.0 versions...

EUVD-2026-89900

Subscriber Cross Site Scripting XSS in ThemeREX Addons 2.45.0 versions...

EUVD-2026-89899

Unauthenticated Cross Site Scripting XSS in ThemeREX Addons 2.45.0 versions...

CVE-2026-97235 WordPress ThemeREX Addons plugin < 2.45.0 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in ThemeREX Addons 2.45.0 versions...

CVE-2026-97235 WordPress ThemeREX Addons plugin < 2.45.0 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in ThemeREX Addons 2.45.0 versions...

CVE-2026-97235

The ThemeREX Addons WordPress plugin (versions

CVE-2026-97236: Improper Neutralization of Input During Web Page Generation

Subscriber Cross Site Scripting XSS in ThemeREX Addons 2.45.0 versions...

CVE-2026-97235: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in ThemeREX Addons 2.45.0 versions...

PT-2026-103231

Unauthenticated Cross Site Scripting XSS in ThemeREX Addons 2.45.0 versions...

PT-2026-103232

Subscriber Cross Site Scripting XSS in ThemeREX Addons 2.45.0 versions...

WordPress ThemeREX Addons plugin < 2.45.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by nh4tvd in WordPress Plugin ThemeREX Addons versions 2.45.0...

WordPress ThemeREX Addons plugin < 2.45.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by nh4tvd in WordPress Plugin ThemeREX Addons versions 2.45.0...

CVE-2026-62105

Unauthenticated PHP Object Injection in ThemeREX Addons 2.45.0 versions...

CVE-2026-62105

CVE-2026-62105 affects the ThemeREX Addons WordPress plugin in versions prior to 2.45.0 , introducing an unauthenticated PHP Object Injection vulnerability. The flaw is exploitable over the network with low complexity, requires no privileges or user interaction, and is scored CVSS 3.1: 9.8 (Criti...

CVE-2026-62105 WordPress ThemeREX Addons plugin < 2.45.0 - PHP Object Injection vulnerability

Unauthenticated PHP Object Injection in ThemeREX Addons 2.45.0 versions...

EUVD-2026-76197

Unauthenticated PHP Object Injection in ThemeREX Addons 2.45.0 versions...

CVE-2026-62105 WordPress ThemeREX Addons plugin < 2.45.0 - PHP Object Injection vulnerability

Unauthenticated PHP Object Injection in ThemeREX Addons 2.45.0 versions...

WordPress ThemeREX Addons plugin < 2.45.0 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by nh4tvd in WordPress Plugin ThemeREX Addons versions 2.45.0...

CVE-2026-62105: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in ThemeREX Addons 2.45.0 versions...

PT-2026-90021

Unauthenticated PHP Object Injection in ThemeREX Addons 2.45.0 versions...