Skip to content
Alex vulnerabilities
Newest
-
alex content mask
Content Mask 1.7.1 - 1.8.5.5 - Contributor+ Stored XSS via Post Scripts and Styles
CVE-2025-15690
6.8 Medium
-
alex content mask
Content Mask 1.8.0 - 1.8.5.4 - Contributor Publish Capability Bypass via create_new_content_mask
CVE-2026-77003
2.7 Low
-
alex featured video plus
WordPress Featured Video Plus plugin <= 2.3.3 - Cross Site Scripting (XSS) vulnerability
CVE-2026-66637
6.5 Medium
-
alex featured video plus
WordPress Featured Video Plus plugin <= 2.3.3 - Sensitive Data Exposure vulnerability
CVE-2026-66685
5.3 Medium
-
alex content mask
WordPress Content Mask plugin <= 1.8.5.2 - Server Side Request Forgery (SSRF) vulnerability
CVE-2025-58011
6.4 Medium
-
alex content mask
WordPress Content Mask plugin <= 1.8.5.3 - Insecure Direct Object References (IDOR) vulnerability
CVE-2025-58012
3.8 Low
-
alex include fussball.de widgets
WordPress Include Fussball.de Widgets plugin <= 4.0.0 - Cross Site Scripting (XSS) vulnerability
CVE-2024-47643
6.5 Medium
-
alex content mask, content mask project mask +1 more
Content Mask < 1.8.4.1 - Subscriber+ Arbitrary Options Update
CVE-2022-1203
Public exploit
4.3 Medium
-
alex downloadengine
Multiple PHP remote file inclusion vulnerabilities in Download-Engine 1.4.2 and earlier allow...
CVE-2006-5459
7.5 High
-
alex downloadengine
PHP remote file inclusion vulnerability in admin/includes/spaw/spaw_control.class.php in Download...
CVE-2006-5291
Public exploit
7.5 High
-
alex news-engine
SQL injection vulnerability in newscomments.php in Alex News-Engine 1.5.0 and earlier allows...
CVE-2006-2879
7.5 High