Skip to content

Duongancol Woostify vulnerabilities

duongancol woostifyWoostify <= 2.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Lity.js Library via data-lity Attribute in Custom HTML BlockCVE-2026-48056.4 MediumApril 28, 2026
duongancol woostifyWordPress Woostify Theme <= 2.4.2 - Cross Site Scripting (XSS) VulnerabilityCVE-2025-601015.9 MediumSeptember 26, 2025