Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2025-6997

The ThemeREX Addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 2.35.1.1 due to insufficient input sanitization and output escaping. The plugin’s SVG rendering routine calls the trx_addons_get_svg_from_file() function on an unvalidated 'svg' parameter supplied via the shortcode or Elementor widget settings, then outputs it via the trx_addons_show_layout() function. Because there is no check on the URL’s origin, scheme, or the SVG content itself, authenticated attackers, with Contributor-level access and above, can supply a remote SVG and inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 7.3%
CVSS Severity
CVSS v3 Score 6.4
Products affected by CVE-2025-6997
  • Themerex » Addons » Version: 1.0.49.10
    cpe:2.3:a:themerex:addons:1.0.49.10
  • Themerex » Addons » Version: 1.6.49.5
    cpe:2.3:a:themerex:addons:1.6.49.5
  • Themerex » Addons » Version: 1.6.49.6
    cpe:2.3:a:themerex:addons:1.6.49.6
  • Themerex » Addons » Version: 1.6.49.6.2
    cpe:2.3:a:themerex:addons:1.6.49.6.2
  • Themerex » Addons » Version: 1.6.49.8
    cpe:2.3:a:themerex:addons:1.6.49.8
  • Themerex » Addons » Version: 1.6.50
    cpe:2.3:a:themerex:addons:1.6.50
  • Themerex » Addons » Version: 1.6.50.1
    cpe:2.3:a:themerex:addons:1.6.50.1
  • Themerex » Addons » Version: 1.6.51.1
    cpe:2.3:a:themerex:addons:1.6.51.1
  • Themerex » Addons » Version: 1.6.51.3
    cpe:2.3:a:themerex:addons:1.6.51.3
  • Themerex » Addons » Version: 1.6.52.1
    cpe:2.3:a:themerex:addons:1.6.52.1
  • Themerex » Addons » Version: 1.6.52.2
    cpe:2.3:a:themerex:addons:1.6.52.2
  • Themerex » Addons » Version: 1.6.53
    cpe:2.3:a:themerex:addons:1.6.53
  • Themerex » Addons » Version: 1.6.53.1
    cpe:2.3:a:themerex:addons:1.6.53.1
  • Themerex » Addons » Version: 1.6.53.2
    cpe:2.3:a:themerex:addons:1.6.53.2
  • Themerex » Addons » Version: 1.6.53.3
    cpe:2.3:a:themerex:addons:1.6.53.3
  • Themerex » Addons » Version: 1.6.54
    cpe:2.3:a:themerex:addons:1.6.54
  • Themerex » Addons » Version: 1.6.55.1
    cpe:2.3:a:themerex:addons:1.6.55.1
  • Themerex » Addons » Version: 1.6.55.3
    cpe:2.3:a:themerex:addons:1.6.55.3
  • Themerex » Addons » Version: 1.6.55.4
    cpe:2.3:a:themerex:addons:1.6.55.4
  • Themerex » Addons » Version: 1.6.55.7
    cpe:2.3:a:themerex:addons:1.6.55.7
  • Themerex » Addons » Version: 1.6.56
    cpe:2.3:a:themerex:addons:1.6.56
  • Themerex » Addons » Version: 1.6.57
    cpe:2.3:a:themerex:addons:1.6.57
  • Themerex » Addons » Version: 1.6.57.2
    cpe:2.3:a:themerex:addons:1.6.57.2
  • Themerex » Addons » Version: 1.6.57.3
    cpe:2.3:a:themerex:addons:1.6.57.3
  • Themerex » Addons » Version: 1.6.57.4
    cpe:2.3:a:themerex:addons:1.6.57.4
  • Themerex » Addons » Version: 1.6.58.2
    cpe:2.3:a:themerex:addons:1.6.58.2
  • Themerex » Addons » Version: 1.6.59
    cpe:2.3:a:themerex:addons:1.6.59
  • Themerex » Addons » Version: 1.6.59.1.1
    cpe:2.3:a:themerex:addons:1.6.59.1.1
  • Themerex » Addons » Version: 1.6.59.2
    cpe:2.3:a:themerex:addons:1.6.59.2
  • Themerex » Addons » Version: 1.6.59.3
    cpe:2.3:a:themerex:addons:1.6.59.3
  • Themerex » Addons » Version: 1.6.60
    cpe:2.3:a:themerex:addons:1.6.60
  • Themerex » Addons » Version: 1.6.61
    cpe:2.3:a:themerex:addons:1.6.61
  • Themerex » Addons » Version: 1.6.61.1
    cpe:2.3:a:themerex:addons:1.6.61.1
  • Themerex » Addons » Version: 1.6.61.2
    cpe:2.3:a:themerex:addons:1.6.61.2
  • Themerex » Addons » Version: 1.6.61.3
    cpe:2.3:a:themerex:addons:1.6.61.3
  • Themerex » Addons » Version: 1.6.62.1
    cpe:2.3:a:themerex:addons:1.6.62.1
  • Themerex » Addons » Version: 1.6.62.3
    cpe:2.3:a:themerex:addons:1.6.62.3
  • Themerex » Addons » Version: 1.6.65
    cpe:2.3:a:themerex:addons:1.6.65
  • Themerex » Addons » Version: 1.6.66
    cpe:2.3:a:themerex:addons:1.6.66
  • Themerex » Addons » Version: 1.6.67
    cpe:2.3:a:themerex:addons:1.6.67
  • Themerex » Addons » Version: 1.70.3
    cpe:2.3:a:themerex:addons:1.70.3


Products
Pricing
Contact Us

Shodan ® - All rights reserved