Security
فارسی
All products

trx_addons

WordPress · Plugin
11 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
ThemeREX Addons <= 2.46.0 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2026-102798 trx_addons WordPress Medium Fix reported
ThemeREX Addons <= 2.46.0 - Authenticated (Contributor+) Server-Side Request ForgeryCVE-2026-102797 trx_addons WordPress Medium Fix reported
ThemeREX Addons < 2.45.0 - Authenticated (Subscriber+) Stored Cross-Site ScriptingCVE-2026-97236 trx_addons WordPress Medium Fix reported
ThemeREX Addons < 2.45.0 - Unauthenticated Stored Cross-Site ScriptingCVE-2026-97235 trx_addons WordPress High Fix reported
ThemeREX Addons <= 2.36.1.1 - Unauthenticated PHP Object InjectionCVE-2025-60205 trx_addons WordPress High Fix reported
ThemeREX Addons < 2.45.0 - Unauthenticated PHP Object InjectionCVE-2026-62105 trx_addons WordPress High Fix reported
ThemeREX Addons < 2.38.5 - Unauthenticated Arbitrary File UploadCVE-2026-1969 trx_addons WordPress Critical Fix reported
ThemeREX Addons <= 2.35.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via trx_addons_get_svg_from_file FunctionCVE-2025-6997 trx_addons WordPress Medium Fix reported
ThemeREX Addons <= 2.32.3 - Unauthenticated Arbitrary File Upload in trx_addons_uploads_save_dataCVE-2024-13448 trx_addons WordPress Critical Fix reported
ThemeREX Addons <= 2.33.0 - Authenticated (Contributor+) Local File Inclusion via ShortcodeCVE-2025-0682 trx_addons WordPress High Fix reported
ThemeREX Addons (Various Versions) - Missing AuthorizationCVE-2020-10257 trx_addons WordPress Critical Fix reported