How many CVEs does ThemeREX ThemeREX Addons have?

ThemeREX ThemeREX Addons has 4 published CVE records since 2025.

How many ThemeREX ThemeREX Addons CVEs are in CISA KEV?

None of ThemeREX ThemeREX Addons's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of ThemeREX ThemeREX Addons are affected?

10 distinct ThemeREX ThemeREX Addons versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in ThemeREX ThemeREX Addons CVEs?

ThemeREX ThemeREX Addons's CVEs most often map to these CWE weakness types: CWE-434 (Unrestricted Upload of File with Dangerous Type), CWE-502 (Deserialization of Untrusted Data), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-98 (Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')).

How many critical ThemeREX ThemeREX Addons vulnerabilities are there?

ThemeREX ThemeREX Addons has 2 critical and 1 high-severity CVEs.

What is the average severity of ThemeREX ThemeREX Addons CVEs?

The average CVSS base score across ThemeREX ThemeREX Addons's scored CVEs is 8.7.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

ThemeREX

4 CVEs

ThemeREX Addons Vulnerabilities

Name: ThemeREX Addons vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for ThemeREX Addons by ThemeREX.

4

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

0

Public exploits

PoC or exploit code

8.7

Avg CVSS

2025–2026

Last updated June 17, 2026

Overview

ThemeREX Addons has 4 published CVE records since 2025, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 0 have a known public exploit. The average CVSS base score across scored CVEs is 8.7.

This page aggregates every publicly disclosed vulnerability (CVE) affecting ThemeREX Addons, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of ThemeREX Addons's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical2

High1

Medium1

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of ThemeREX Addons's CVEs are currently listed in CISA's KEV catalog.

Public exploits

0

No ThemeREX Addons CVEs currently have a tracked public exploit.

Affected versions and CVEs

Browse every ThemeREX Addons version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

<= 2.32.31 CVE
<= 2.33.01 CVE
<= 2.35.1.11 CVE
<= 2.36.1.11 CVE
>= 2.36.21 CVE

Fixed in

> 2.32.31 CVE
> 2.33.01 CVE
> 2.35.1.11 CVE
> 2.36.1.11 CVE
2.36.21 CVE

Find a version

4 CVEs

Sort

WordPress ThemeREX Addons plugin <= 2.36.1.1 - PHP Object Injection vulnerability
CVE-2025-60205
Patch
CWE-502
Critical · CVSS 9.8
EPSS 0.5% (41th pct)2026-06-17
ThemeREX Addons <= 2.35.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via trx_addons_get_svg_from_file Function
CVE-2025-6997
Patch
CWE-79
Medium · CVSS 6.4
EPSS 0.2% (11th pct)2025-07-19
ThemeREX Addons <= 2.32.3 - Unauthenticated Arbitrary File Upload in trx_addons_uploads_save_data
CVE-2024-13448
Patch
CWE-434
Critical · CVSS 9.8
EPSS 0.9% (55th pct)2025-01-28
ThemeREX Addons <= 2.33.0 - Authenticated (Contributor+) Local File Inclusion via Shortcode
CVE-2025-0682
Patch
CWE-98
High · CVSS 8.8
EPSS 0.6% (45th pct)2025-01-25

Common weakness types

The CWE weakness categories most often found in ThemeREX Addons CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many ThemeREX Addons CVEs were published each year.

2025

3

2026

1

Other ThemeREX products

Browse vulnerabilities for other products by ThemeREX.

addons4 CVEs puzzles3 CVEs Puzzles | WP Magazine / Review with Store WordPress Theme + RTL3 CVEs Booked2 CVEs gridiron2 CVEs vapester2 CVEs Abelle1 CVEs AirSupply1 CVEs

All ThemeREX vulnerabilities

Frequently asked questions

Common questions about ThemeREX Addons vulnerabilities.

How many CVEs does ThemeREX ThemeREX Addons have?: ThemeREX ThemeREX Addons has 4 published CVE records since 2025.
How many ThemeREX ThemeREX Addons CVEs are in CISA KEV?: None of ThemeREX ThemeREX Addons's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for ThemeREX ThemeREX Addons vulnerabilities?: No ThemeREX ThemeREX Addons CVEs currently have a tracked public exploit in this dataset.
Which versions of ThemeREX ThemeREX Addons are affected?: 10 distinct ThemeREX ThemeREX Addons versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in ThemeREX ThemeREX Addons CVEs?: ThemeREX ThemeREX Addons's CVEs most often map to these CWE weakness types: CWE-434 (Unrestricted Upload of File with Dangerous Type), CWE-502 (Deserialization of Untrusted Data), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-98 (Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')).
How many critical ThemeREX ThemeREX Addons vulnerabilities are there?: ThemeREX ThemeREX Addons has 2 critical and 1 high-severity CVEs.
What is the average severity of ThemeREX ThemeREX Addons CVEs?: The average CVSS base score across ThemeREX ThemeREX Addons's scored CVEs is 8.7.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track ThemeREX Addons vulnerabilities

Monitor new ThemeREX Addons vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing