522 matches found
CVE-2026-97236
Subscriber Cross Site Scripting XSS in ThemeREX Addons 2.45.0 versions...
CVE-2026-97235
Unauthenticated Cross Site Scripting XSS in ThemeREX Addons 2.45.0 versions...
CVE-2026-97236
The WordPress ThemeREX Addons plugin, in versions
CVE-2026-97236 WordPress ThemeREX Addons plugin < 2.45.0 - Cross Site Scripting (XSS) vulnerability
Subscriber Cross Site Scripting XSS in ThemeREX Addons 2.45.0 versions...
EUVD-2026-89900
Subscriber Cross Site Scripting XSS in ThemeREX Addons 2.45.0 versions...
CVE-2026-97236 WordPress ThemeREX Addons plugin < 2.45.0 - Cross Site Scripting (XSS) vulnerability
Subscriber Cross Site Scripting XSS in ThemeREX Addons 2.45.0 versions...
CVE-2026-97235 WordPress ThemeREX Addons plugin < 2.45.0 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in ThemeREX Addons 2.45.0 versions...
EUVD-2026-89899
Unauthenticated Cross Site Scripting XSS in ThemeREX Addons 2.45.0 versions...
CVE-2026-97235 WordPress ThemeREX Addons plugin < 2.45.0 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in ThemeREX Addons 2.45.0 versions...
CVE-2026-97235
The ThemeREX Addons WordPress plugin (versions
ThemeREX Addons - Remote Code Execution
ThemeREX Addons plugin before 2020-03-09 for WordPress contains an access control vulnerability in the /trxaddons/v2/get/sclayout REST API endpoint, allowing any users to execute PHP functions because includes/plugin.rest-api.php calls trxaddonsrestgetsclayout with an unsafe sc parameter, letting...
WordPress ThemeREX Addons plugin < 2.45.0 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by nh4tvd in WordPress Plugin ThemeREX Addons versions 2.45.0...
WordPress ThemeREX Addons plugin < 2.45.0 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by nh4tvd in WordPress Plugin ThemeREX Addons versions 2.45.0...
CVE-2026-62105
Unauthenticated PHP Object Injection in ThemeREX Addons 2.45.0 versions...
CVE-2026-62105
CVE-2026-62105 affects the ThemeREX Addons WordPress plugin in versions prior to 2.45.0 , introducing an unauthenticated PHP Object Injection vulnerability. The flaw is exploitable over the network with low complexity, requires no privileges or user interaction, and is scored CVSS 3.1: 9.8 (Criti...
EUVD-2026-76197
Unauthenticated PHP Object Injection in ThemeREX Addons 2.45.0 versions...
CVE-2026-62105 WordPress ThemeREX Addons plugin < 2.45.0 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in ThemeREX Addons 2.45.0 versions...
CVE-2026-62105 WordPress ThemeREX Addons plugin < 2.45.0 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in ThemeREX Addons 2.45.0 versions...
