CVE-2026-102797

Server-Side Request Forgery (SSRF) vulnerability in ThemeREX Group ThemeREX Addons trx_addons allows Server Side Request Forgery.This issue affects ThemeREX Addons: from n/a through 2.46.0.

  • Published Oct 2, 2026
  • CVSS 6.4 medium
  • 0.1% chance of exploitation in the next 30 days (EPSS)

Affected software

CVE-2026-102797 at the National Vulnerability Database