Skip to contentRoxnor vulnerabilities
Newest
- roxnor popup builder with gamification, multi-step popups, page-level targeting, and woocommerce triggersPopup builder with Gamification, Multi-Step Popups, Page-Level Targeting, and WooCommerce Triggers <= 2.1.4 - Unauthenticated Server-Side Request ForgeryCVE-2025-108617.5 High
- roxnor popup builder with gamification, multi-step popups, page-level targeting, and woocommerce triggersPopup builder with Gamification, Multi-Step Popups, Page-Level Targeting, and WooCommerce Triggers <= 2.1.3 - Unauthenticated SQL Injection via 'id'CVE-2025-108627.5 High
- roxnor emailkitWordPress EmailKit Plugin <= 1.6.0 - Arbitrary Content Deletion VulnerabilityCVE-2025-601064.9 Medium
- roxnor shopengine elementor woocommerce builder addon – all in one woocommerce solutionShopEngine Elementor WooCommerce Builder Addon – All in One WooCommerce Solution <= 4.8.3 - Insufficient Authorization to Authenticated (Editor+) Settings UpdateCVE-2025-101732.7 Low
- roxnor fundengineWordPress FundEngine Plugin <= 1.7.4 - Local File Inclusion VulnerabilityCVE-2025-483027.5 High
- roxnor metform – contact form, survey, quiz, & custom form builder for elementorMetForm <= 4.0.1 - Authenticated(Contributor+) Stored Cross-Site Scripting via `mf-template` DOM ElementCVE-2025-56846.4 Medium
- wpmet elementskit elementor addons, roxnor elementskit elementor addons – advanced widgets & templates addons for elementor +1 moreElementsKit Elementor Addons and Templates <= 3.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom WidgetCVE-2025-36146.4 Medium
- wpmet elementskit elementor addons, roxnor elementskit elementor addons – advanced widgets & templates addons for elementor +1 moreElementsKit Lite <= 3.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Comparison WidgetCVE-2025-44796.4 Medium
- roxnor fundengineWordPress WP Fundraising Donation and Crowdfunding Platform plugin <= 1.7.3 - Cross Site Request Forgery (CSRF) VulnerabilityCVE-2025-474594.3 Medium
- wpmet elementskit elementor addons, roxnor elementskit elementor addons – advanced widgets & templates addons for elementor +1 moreElementsKit Elementor addons <= 3.4.7 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2024-111806.4 Medium
- roxnor metformWordPress Metform Elementor Contact Form Builder plugin <= 3.9.7 - Server Side Request Forgery (SSRF) vulnerabilityCVE-2025-309144.4 Medium
- roxnor wp social login and register social counterWp Social Login and Register Social Counter <= 3.1.0 - Cross-Site Request Forgery to Settings UpdateCVE-2025-15064.3 Medium
- wpmet elementskit elementor addons, roxnor elementskit elementor addons – advanced widgets & templates addons for elementor +1 moreElementsKit Elementor addons <= 3.4.0 - Unauthenticated Information Exposure via get_megamenu_content FunctionCVE-2025-09685.3 Medium
- wpmet elementskit elementor addons, roxnor elementskit elementor addons – advanced widgets & templates addons for elementor +1 moreElementsKit Elementor addons <= 3.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Accordion WidgetCVE-2025-10056.4 Medium
- roxnor metform, wpmet metform elementor contact form builder +1 moreWordPress Metform Elementor Contact Form Builder plugin <= 3.4.0 - Broken Access Control vulnerabilityCVE-2023-509035.3 Medium
- roxnor elementskit elementor addons lite, wpmet elements kit elementor addons +1 moreWordPress ElementsKit Lite plugin <= 3.1.4 - Unauthenticated Broken Access Control vulnerabilityCVE-2024-372555.3 Medium
- roxnor wp social login and register social counterWp Social Login and Register Social Counter <= 3.0.7 - Authentication Bypass via WordPress.com OAuth providerCVE-2024-95019.8 Critical
- roxnor elementskit elementor addons – advanced widgets & templates addons for elementor, wpmet elements kit elementor addons +1 moreElementsKit Elementor addons <= 3.2.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Comparison WidgetCVE-2024-100916.4 Medium
- wpmet elementskit elementor addons, roxnor elementskit elementor addons – advanced widgets & templates addons for elementor +1 moreElementsKit Elementor addons <= 3.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Video WidgetCVE-2024-85466.4 Medium
- wpmet metform elementor contact form builder, roxnor metform – contact form, survey, quiz, & custom form builder for elementor +1 moreMetform Elementor Contact Form Builder <= 3.2.4 - Unauthenticated Double-Extension Arbitrary File UploadCVE-2023-07148.1 High
- roxnor fundengine – donation and crowdfunding platform, wpmet fundengine, wp fundraising donation and crowdfunding platform +2 moreFundEngine – Donation and Crowdfunding Platform <= 1.7.0 - Authenticated (Subscriber+) Privilege EscalationCVE-2024-66988.8 High
- roxnor elementskit elementor addons – advanced widgets & templates addons for elementor, wpmet elements kit elementor addons +1 moreElementsKit Elementor addons <= 3.2.0 - Unauthenticated Information Exposure via ekit_widgetarea_content FunctionCVE-2024-64555.3 Medium
- roxnor metform – contact form, survey, quiz, & custom form builder for elementor, wpmet metform elementor contact form builder +1 moreMetForm – Contact Form, Survey, Quiz, & Custom Form Builder for Elementor <= 3.8.8 - Unauthenticated Sensitive Information ExposureCVE-2024-42665.3 Medium
- roxnor wp ultimate reviewWordPress WP Ultimate Review plugin <= 2.2.5 - Review Score Manipulation vulnerabilityCVE-2024-326855.3 Medium
- roxnor wp ultimate reviewWordPress Wp Ultimate Review plugin <= 2.3.6 - IP limit Bypass vulnerabilityCVE-2024-217465.3 Medium
- roxnor metform, wpmet metform elementor contact form builder +1 moreWordPress MetForm plugin <= 3.8.3 - Broken Access Control vulnerabilityCVE-2024-335704.3 Medium
- roxnor elementskit elementor addons – advanced widgets & templates addons for elementor, wpmet elements kit elementor addons +1 moreElementsKit Elementor addons <= 3.1.0 - Authenticated (Contributor+) Local File Inclusion via Onepage Scroll ModuleCVE-2024-34998.8 High
- roxnor wp ultimate reviewWordPress WP Ultimate Review plugin <= 2.2.5 - Broken Access Control on Review vulnerabilityCVE-2024-326845.3 Medium
- roxnor wp ultimate reviewWordPress WP Ultimate Review plugin <= 2.2.5 - Insecure Direct Object References (IDOR) vulnerabilityCVE-2024-326835.3 Medium
- roxnor elementskit elementor addons lite, wpmet elements kit elementor addons +1 moreWordPress ElementsKit Elementor addons plugin <= 3.0.6 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-325056.5 Medium
- roxnor elementskit elementor addons – advanced widgets & templates addons for elementor, wpmet elements kit elementor addons +1 moreElementsKit Elementor addons <= 3.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown WidgetCVE-2024-28036.4 Medium
- wpmet metform elementor contact form builder, roxnor metform – contact form, survey, quiz, & custom form builder for elementor +1 moreMetform Elementor Contact Form Builder <= 3.8.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via WidgetsCVE-2024-27916.4 Medium
- roxnor elementskit elementor addons – advanced widgets & templates addons for elementor, wpmet elements kit elementor addons +1 moreElementsKit Elementor addons <= 3.0.6 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2024-12386.4 Medium
- roxnor elementskit elementor addons – advanced widgets & templates addons for elementor, wpmet elements kit elementor addons +1 moreElementsKit Elementor addons <= 3.0.6 - Authenticated (Contributor+) Local File Inclusion in render_rawCVE-2024-20478.8 High
- wpmet elementskit elementor addons, roxnor elementskit elementor addons – advanced widgets & templates addons for elementor +1 moreElementsKit Elementor addons <= 3.0.3 - Authenticated(Editor+) Stored Cross-Site ScriptingCVE-2023-65255.5 Medium
- roxnor elementskit elementor addons – advanced widgets & templates addons for elementor, wpmet elements kit elementor addons +1 moreElementsKit Elementor addons <= 3.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Accordion WidgetCVE-2024-20426.4 Medium
- roxnor elementskit elementor addons – advanced widgets & templates addons for elementor, wpmet elements kit elementor addons +1 moreElementsKit Elementor addons <= 3.0.4 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2024-12396.4 Medium
- roxnor wp social login and register social counterWp Social Login and Register Social Counter <= 3.0.0 - Missing Authorization to Unauthenticated Social Login/Share Status UpdateCVE-2024-17636.5 Medium
- wpmet metform elementor contact form builder, roxnor metform – contact form, survey, quiz, & custom form builder for elementor +1 moreMetform Elementor Contact Form Builder <= 3.8.3 - Authenticated(Contributor+) Stored Cross-Site Scripting via ShortcodeCVE-2024-15856.4 Medium
- roxnor wp social login and register social counterWordPress Wp Social Plugin <= 1.9.0 is vulnerable to Sensitive Data ExposureCVE-2022-471606.5 Medium
- roxnor elementskit elementor addons – advanced widgets & templates addons for elementor, wpmet elements kit elementor addons +1 moreElementsKit Lite <= 3.0.3 - Unauthenticated Sensitive Information ExposureCVE-2023-65825.3 Medium
- wpmet metform elementor contact form builder, roxnor metform – contact form, survey, quiz, & custom form builder for elementor +1 moreMetform Elementor Contact Form Builder <= 3.8.1 - Cross-Site Request ForgeryCVE-2023-67885.4 Medium
- roxnor wp ultimate reviewWordPress Wp Ultimate Review Plugin <= 2.0.3 is vulnerable to Cross Site Request Forgery (CSRF)CVE-2023-289874.3 Medium
- roxnor wp ultimate reviewWordPress Wp Ultimate Review Plugin <= 2.2.4 is vulnerable to Cross Site Request Forgery (CSRF)CVE-2023-460854.3 Medium
- wpmet metform elementor contact form builder, roxnor metform – contact form, survey, quiz, & custom form builder for elementor +1 moreMetform Elementor Contact Form Builder <= 3.3.1 - Authenticated (Subscriber+) Information Disclosure via 'mf_first_name' shortcodeCVE-2023-06894.3 Medium
- wpmet metform elementor contact form builder, roxnor metform – contact form, survey, quiz, & custom form builder for elementor +1 moreMetform Elementor Contact Form Builder <= 3.3.2 - Cross-Site Request Forgery via permalink_setupCVE-2023-25175.4 Medium
- roxnor wp ultimate reviewWordPress Wp Ultimate Review Plugin <= 2.0.3 is vulnerable to Cross Site Scripting (XSS)CVE-2023-287515.9 Medium
- wpmet metform elementor contact form builder, roxnor metform – contact form, survey, quiz, & custom form builder for elementor +1 moreMetform Elementor Contact Form Builder <= 3.3.1 - Authenticated (Subscriber+) Information Disclosure via 'mf_payment_status' shortcodeCVE-2023-06924.3 Medium
- wpmet metform elementor contact form builder, roxnor metform – contact form, survey, quiz, & custom form builder for elementor +1 moreMetform Elementor Contact Form Builder <= 3.3.0 - Unauthenticated CSV InjectionCVE-2023-07218.3 High
- wpmet metform elementor contact form builder, roxnor metform – contact form, survey, quiz, & custom form builder for elementor +1 moreMetform Elementor Contact Form Builder <= 3.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via mf_first_name shortcodeCVE-2023-07085.4 Medium
- Show moreLoading…