Skip to contentWpwax vulnerabilities
Newest
- wpwax legal pagesWordPress Legal Pages plugin <= 1.3.7 - CSRF + Broken Access Control vulnerabilityCVE-2023-508864.3 Medium
- wpwax product carousel slider & grid ultimate for woocommerce, product carosel slider \& grid ultimate, product carousel slider \& grid ultimate for woocommerce +2 moreProduct Carousel Slider & Grid Ultimate for WooCommerce <= 1.9.7 - Authenticated(Contributor+) PHP Object InjectionCVE-2024-19507.5 High
- wpwax logo showcase ultimate – logo carousel, logo slider & logo grid, logo showcase ultimate +1 moreLogo Showcase Ultimate – Logo Carousel, Logo Slider & Logo Grid <= 1.3.8 - Authenticated(Contributor+) PHP Object InjectionCVE-2024-19517.5 High
- wpwax post grid, slider & carousel ultimate – with shortcode, gutenberg block & elementor widget, post grid\, slider \& carousel ultimate +1 morePost Grid, Slider & Carousel Ultimate – with Shortcode, Gutenberg Block & Elementor Widget <= 1.6.7 - Authenticated (Contributor+) PHP Object Injection in outpost_shortcode_metabox_markupCVE-2024-20068.8 High
- wpwax directorist, directorist: ai-powered business directory, listings & classified ads +1 moreDirectorist <= 7.8.4 - Missing Authorization to Unauthenticated Settings ChangeCVE-2024-13225.3 Medium
- unknown directoristDirectorist < 7.5.4 - Admin+ LFICVE-2023-22522.7 Low
- wpwax legal pages – privacy policy, terms & conditions, gdpr, ccpa, and cookie notice generator, legal pages +1 moreWordPress Legal Pages Plugin <= 1.3.8 is vulnerable to Cross Site Request Forgery (CSRF)CVE-2023-478245.4 Medium
- wpwax directorist, directorist – wordpress business directory plugin with classified ads listings +1 moreWordPress Directorist Plugin <= 7.7.1 is vulnerable to CSV InjectionCVE-2023-417985.1 Medium
- wpwax directorist, directorist: ai-powered business directory, listings & classified ads +1 moreDirectorist <= 7.5.4 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary Post Deletion in listing_taskCVE-2023-18896.5 Medium
- wpwax directorist, directorist: ai-powered business directory, listings & classified ads +1 moreDirectorist <= 7.5.4 - Authenticated (Subscriber+) Arbitrary User Password Reset to Privilege EscalationCVE-2023-18888.8 High
- unknown directoristDirectorist < 7.4.4 - Subscriber+ Sensitive Information DisclosureCVE-2022-39616.5 Medium
- unknown directoristDirectorist < 7.4.2.2 - Subscriber+ Arbitrary User Password Update via IDORCVE-2022-39306.5 Medium
- wpwax directorist, unknown directorist – wordpress business directory plugin with classified ads listings +1 moreDirectorist < 7.3.1 - Unauthenticated Email Address DisclosureCVE-2022-23765.3 Medium
- wpwax directorist, unknown directorist – wordpress business directory plugin with classified ads listings +1 moreDirectorist < 7.3.0 - Subscriber+ Arbitrary E-mail SendingCVE-2022-23774.3 Medium
- wpwax directorist, unknown directorist – wordpress business directory plugin with classified ads listings +1 moreDirectorist - Business Directory Plugin < 7.2.3 - Admin+ Arbitrary File UploadCVE-2022-20464.9 Medium
- wpwax team, team (wordpress plugin) +1 moreWordPress Team plugin <= 1.2.6 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilitiesCVE-2022-346504.1 Medium
- wpwax team, team (wordpress plugin) +1 moreWordPress Team plugin <= 1.2.6 - Multiple Authenticated Persistent Cross-Site Scripting (XSS) vulnerabilitiesCVE-2022-348534.1 Medium
- unknown post grid, slider & carousel ultimate, wpwax post grid\, slider \& carousel ultimate +1 morePost Grid, Slider & Carousel Ultimate < 1.5.0 - Admin+ Stored XSSCVE-2022-12664.8 Medium
- unknown directorist – business directory plugin, wpwax directorist +1 moreDirectorist – Business Directory Plugin < 7.0.6.2 - CSRF to Remote File UploadCVE-2021-249817.5 High