Plugin icon

Trx_addons

trx_addons

Vulnerabilities:

24

Last Updated:

April 5, 2026

Active Installs:

n/a

Published
Title
Fixed in
CVSS
Published
2026-03-02
Title
ThemeREX Addons < 2.38.5 - Unauthenticated Arbitrary File Upload
Fixed in
Fixed in 2.38.5
CVSS
9.8 (critical)
Published
2025-07-18
Title
ThemeREX Addons < 2.35.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via trx_addons_get_svg_from_file Function
Fixed in
Fixed in 2.35.2.2
CVSS
6.4 (medium)
Published
2025-01-27
Title
ThemeREX Addons < 2.34.0 - Unauthenticated Arbitrary File Upload in trx_addons_uploads_save_data
Fixed in
Fixed in 2.34.0
CVSS
9.8 (critical)
Published
2025-01-24
Title
ThemeREX Addons < 2.34.0 - Authenticated (Contributor+) Local File Inclusion via Shortcode
Fixed in
Fixed in 2.34.0
CVSS
8.8 (high)
Published
2020-02-18
Title
ThemeREX Addons - Remote Code Execution
Fixed in
Fixed in 1.6.49.9
CVSS
9.8 (critical)
Published
2020-02-18
Title
ThemeREX Addons - Remote Code Execution
Fixed in
Fixed in 1.70.3.1
CVSS
9.8 (critical)
Published
2020-02-18
Title
ThemeREX Addons - Remote Code Execution
Fixed in
Fixed in 1.6.53.4
CVSS
9.8 (critical)
Published
2020-02-18
Title
ThemeREX Addons - Remote Code Execution
Fixed in
Fixed in 1.6.66.1
CVSS
9.8 (critical)
Published
2020-02-18
Title
ThemeREX Addons - Remote Code Execution
Fixed in
Fixed in 1.6.59.1.2
CVSS
9.8 (critical)
Published
2020-02-18
Title
ThemeREX Addons - Remote Code Execution
Fixed in
Fixed in 1.6.51.4
CVSS
9.8 (critical)
Published
2020-02-18
Title
ThemeREX Addons - Remote Code Execution
Fixed in
Fixed in 1.6.60.1
CVSS
9.8 (critical)
Published
2020-02-18
Title
ThemeREX Addons - Remote Code Execution
Fixed in
Fixed in 1.6.61.2.1
CVSS
9.8 (critical)
Published
2020-02-18
Title
ThemeREX Addons - Remote Code Execution
Fixed in
Fixed in 1.6.56.1
CVSS
9.8 (critical)
Published
2020-02-18
Title
ThemeREX Addons - Remote Code Execution
Fixed in
Fixed in 1.6.58.3
CVSS
9.8 (critical)
Published
2020-02-18
Title
ThemeREX Addons - Remote Code Execution
Fixed in
Fixed in 1.6.54.1
CVSS
9.8 (critical)
Published
2020-02-18
Title
ThemeREX Addons - Remote Code Execution
Fixed in
Fixed in 1.6.67.1
CVSS
9.8 (critical)
Published
2020-02-18
Title
ThemeREX Addons - Remote Code Execution
Fixed in
Fixed in 1.6.61.1.1
CVSS
9.8 (critical)
Published
2020-02-18
Title
ThemeREX Addons - Remote Code Execution
Fixed in
Fixed in 1.6.52.3
CVSS
9.8 (critical)
Published
2020-02-18
Title
ThemeREX Addons - Remote Code Execution
Fixed in
Fixed in 1.6.65.1
CVSS
9.8 (critical)
Published
2020-02-18
Title
ThemeREX Addons - Remote Code Execution
Fixed in
Fixed in 1.6.49.6.3
CVSS
9.8 (critical)
Published
2020-02-18
Title
ThemeREX Addons - Remote Code Execution
Fixed in
Fixed in 1.6.50.2
CVSS
9.8 (critical)
Published
2020-02-18
Title
ThemeREX Addons - Remote Code Execution
Fixed in
Fixed in 1.6.57.4
CVSS
9.8 (critical)
Published
2020-02-18
Title
ThemeREX Addons - Remote Code Execution
Fixed in
Fixed in 1.6.59.4
CVSS
9.8 (critical)
Published
2020-02-18
Title
ThemeREX Addons - Remote Code Execution
Fixed in
Fixed in 1.6.55.8
CVSS
9.8 (critical)