ThemeREX Addons

3 known vulnerabilities in ThemeREX Addons, 1 critical, with patch priority, exploit likelihood and the news covering them.

Latest vulnerabilities

  • CVE-2026-97236 CVSS 6.5 medium Subscriber Cross Site Scripting (XSS) in ThemeREX Addons < 2.45.0 versions.
  • CVE-2026-97235 CVSS 7.1 high Unauthenticated Cross Site Scripting (XSS) in ThemeREX Addons < 2.45.0 versions.
  • CVE-2026-62105 CVSS 9.8 critical Unauthenticated PHP Object Injection in ThemeREX Addons < 2.45.0 versions.