Pricing
Case studies
Login
Start trial
ThemeREX Addons
ThemeREX Group
Developer
N/A
Latest version
N/A
Installations
N/A
Last updated
WordPress Plugin
Active VDP
Report vulnerability
Vulnerabilities
Security Policy
Security Contributors
Vulnerability history
0 present
10 patched
6 Mitigation rules
Server Side Request Forgery (SSRF) vulnerability
<= 2.46.0
02/10/2026
Cross Site Scripting (XSS) vulnerability
<= 2.46.0
02/10/2026
Cross Site Scripting (XSS) vulnerability
< 2.45.0
24/09/2026
Cross Site Scripting (XSS) vulnerability
< 2.45.0
24/09/2026
PHP Object Injection vulnerability
< 2.45.0
11/09/2026
Unauthenticated Arbitrary File Upload vulnerability
< 2.38.5
30/03/2026
PHP Object Injection vulnerability
<= 2.36.1.1
27/08/2025
Authenticated (Contributor+) Stored Cross-Site Scripting via trx_addons_get_svg_from_file Function vulnerability
<= 2.35.1.1
21/07/2025
Unauthenticated Arbitrary File Upload in trx_addons_uploads_save_data vulnerability
<= 2.32.3
28/01/2025
Authenticated (Contributor+) Local File Inclusion via Shortcode vulnerability
<= 2.33.0
27/01/2025