534 matches found
ThemeREX Addons - Remote Code Execution
ThemeREX Addons plugin before 2020-03-09 for WordPress contains an access control vulnerability in the /trxaddons/v2/get/sclayout REST API endpoint, allowing any users to execute PHP functions because includes/plugin.rest-api.php calls trxaddonsrestgetsclayout with an unsafe sc parameter, letting...
CVE-2026-102798
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ThemeREX Group ThemeREX Addons trxaddons allows Stored XSS.This issue affects ThemeREX Addons: from n/a through 2.46.0...
CVE-2026-102797
Server-Side Request Forgery SSRF vulnerability in ThemeREX Group ThemeREX Addons trxaddons allows Server Side Request Forgery.This issue affects ThemeREX Addons: from n/a through 2.46.0...
CVE-2026-102797 WordPress ThemeREX Addons plugin <= 2.46.0 - Server Side Request Forgery (SSRF) vulnerability
Server-Side Request Forgery SSRF vulnerability in ThemeREX Group ThemeREX Addons trxaddons allows Server Side Request Forgery.This issue affects ThemeREX Addons: from n/a through 2.46.0...
CVE-2026-102797
The ThemeREX Addons plugin for WordPress (versions
EUVD-2026-91590
Server-Side Request Forgery SSRF vulnerability in ThemeREX Group ThemeREX Addons trxaddons allows Server Side Request Forgery.This issue affects ThemeREX Addons: from n/a through 2.46.0...
WordPress ThemeREX Addons plugin <= 2.46.0 - Server Side Request Forgery (SSRF) vulnerability
Server Side Request Forgery SSRF vulnerability discovered by nh4tvd in WordPress Plugin ThemeREX Addons versions = 2.46.0...
CVE-2026-102798 WordPress ThemeREX Addons plugin <= 2.46.0 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ThemeREX Group ThemeREX Addons trxaddons allows Stored XSS.This issue affects ThemeREX Addons: from n/a through 2.46.0...
CVE-2026-102798
The ThemeREX Addons (trx_addons) WordPress plugin, from version n/a through 2.46.0 , is vulnerable to a Stored Cross-site Scripting (XSS) flaw. This issue is caused by the improper neutralization of input during web page generation, which could allow an attacker to inject and execute malicious sc...
EUVD-2026-91589
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ThemeREX Group ThemeREX Addons trxaddons allows Stored XSS.This issue affects ThemeREX Addons: from n/a through 2.46.0...
WordPress ThemeREX Addons plugin <= 2.46.0 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by nh4tvd in WordPress Plugin ThemeREX Addons versions = 2.46.0...
CVE-2026-97236
Subscriber Cross Site Scripting XSS in ThemeREX Addons 2.45.0 versions...
CVE-2026-97235
Unauthenticated Cross Site Scripting XSS in ThemeREX Addons 2.45.0 versions...
CVE-2026-97236 WordPress ThemeREX Addons plugin < 2.45.0 - Cross Site Scripting (XSS) vulnerability
Subscriber Cross Site Scripting XSS in ThemeREX Addons 2.45.0 versions...
EUVD-2026-89900
Subscriber Cross Site Scripting XSS in ThemeREX Addons 2.45.0 versions...
CVE-2026-97236
The WordPress ThemeREX Addons plugin, in versions
CVE-2026-97236 WordPress ThemeREX Addons plugin < 2.45.0 - Cross Site Scripting (XSS) vulnerability
Subscriber Cross Site Scripting XSS in ThemeREX Addons 2.45.0 versions...
EUVD-2026-89899
Unauthenticated Cross Site Scripting XSS in ThemeREX Addons 2.45.0 versions...