CVE-2025-6997 | ThemeREX Addons Plugin up to 2.35.1.1 on WordPress trx_addons_get_svg_from_file svg cross site scripting

July 19, 2025 Yanac

A vulnerability was found in ThemeREX Addons Plugin up to 2.35.1.1 on WordPress. It has been classified as problematic. Affected is the function trx_addons_get_svg_from_file. The manipulation of the argument svg leads to cross site scripting.

This vulnerability is traded as CVE-2025-6997. It is possible to launch the attack remotely. There is no exploit available.VulDB Recent EntriesRead More