Lucene search
K

4 matches found

Patchstack
Patchstack
added 2025/08/27 12:46 p.m.3 views

WordPress ThemeREX Addons plugin <= 2.36.1.1 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Bonds in WordPress Plugin ThemeREX Addons versions = 2.36.1.1...

7.3AI score
Exploits0Affected Software1
CNNVD
CNNVD
added 2025/07/19 12:0 a.m.2 views

WordPress plugin ThemeREX Addons 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin ... A cross-site scripting...

6.4CVSS5.8AI score0.0008EPSS
Exploits0References4
OSV
OSV
added 2025/01/28 7:15 a.m.1 views

CVE-2024-13448

The ThemeREX Addons plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'trxaddonsuploadssavedata' function in all versions up to, and including, 2.32.3. This makes it possible for unauthenticated attackers to upload arbitrary files on the...

9.8CVSS6.4AI score
Exploits0References2
CNNVD
CNNVD
added 2025/01/28 12:0 a.m.2 views

WordPress plugin ThemeREX Addons 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue exists in...

9.8CVSS9.1AI score0.03016EPSS
Exploits0References2
Rows per page
Query Builder