PricingCase studies Login Start trial
Plugin Icon

ThemeREX Addons

ThemeREX Group

Developer

N/A

Latest version

N/A

Installations

N/A

Last updated

WordPress Plugin
Active VDP
Report vulnerability
    VulnerabilitiesSecurity PolicySecurity Contributors

Vulnerability history

0 present
4 fixed
2 Mitigation rules
  • PHP Object Injection vulnerability
    <= 2.36.1.1
    Aug 27, 2025
  • Authenticated (Contributor+) Stored Cross-Site Scripting via trx_addons_get_svg_from_file Function vulnerability
    <= 2.35.1.1
    Jul 21, 2025
  • Unauthenticated Arbitrary File Upload in trx_addons_uploads_save_data vulnerability
    <= 2.32.3
    Jan 28, 2025
  • Authenticated (Contributor+) Local File Inclusion via Shortcode vulnerability
    <= 2.33.0
    Jan 27, 2025

Vulnerability mitigation

  • Pricing
  • Application security (SCA)
  • RapidMitigate New
  • Threat Intelligence (API)
  • VS Monarx
  • VS Imunify360
  • VS Wordfence
  • Documentation
  • Service status
  • Log in

Code security

  • Managed VDP New
  • Active VDP directory 1,085
  • Security auditing
  • Compliance (CRA) New
  • Log in New

Bug bounty

  • Bug bounty
  • Leaderboard
  • Guidelines
  • Learn New
  • Report
  • Discord
  • Log in New

Use cases

  • Web developers
  • Webhosts New
  • Software vendors
  • WordPress
  • WooCommerce

Resources

  • Vulnerability database
  • Whitepaper 2025 New
  • Articles
  • Case studies New
  • Webinars New
  • Vulnerability statistics

Patchstack

  • About
  • Careers
  • Merch store
  • Media kit
  • LinkedIn
  • Facebook
  • X
© 2025 Patchstack
DPA
Privacy Policy
Accessibility
Terms & Conditions
EU Flag