Skip to content

Wpxpo vulnerabilities

Products

Newest

wpxpo wholesalex – all-in-one b2b solution with wholesale pricing WholesaleX <= 3.0.8 - Unauthenticated Limited Privilege Escalation via 'process_registration' CVE-2026-8145 5.4 MediumOctober 15, 2026
wpxpo post grid gutenberg blocks – postx Post Grid Gutenberg Blocks <= 5.1.0 - Unauthenticated Stored Cross-Site Scripting via display_name User Field CVE-2026-96840 7.2 HighOctober 10, 2026
wpxpo post grid gutenberg blocks – postx PostX <= 5.0.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Comments Block CVE-2026-5158 6.4 MediumAugust 6, 2026
wpxpo wowstore – store builder & product blocks for woocommerce WowStore <= 4.4.24 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'currentPostId' Block Attribute CVE-2026-17162 6.4 MediumJuly 29, 2026
wpxpo wowstore – store builder & product blocks for woocommerce WowStore <= 4.4.24 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'filterMobileText' Block Attribute CVE-2026-17161 6.4 MediumJuly 29, 2026
wpxpo post grid gutenberg blocks – postx Post Grid Gutenberg Blocks <= 5.0.32 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'searchnoresult' Block Attribute CVE-2026-15100 6.4 MediumJuly 24, 2026
wpxpo wowaddons WordPress WowAddons plugin <= 1.6.8 - Broken Access Control vulnerability CVE-2026-57377 6.5 MediumJuly 13, 2026
wpxpo post grid gutenberg blocks – postx Post Grid Gutenberg Blocks for News, Magazines, Blog Websites <= 5.0.31 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'moreResultsText' Block Attribute CVE-2026-13253 6.4 MediumJuly 9, 2026
wpxpo wowaddons WordPress WowAddons plugin <= 1.6.14 - Cross Site Scripting (XSS) vulnerability CVE-2026-57686 7.1 HighJuly 2, 2026
wpxpo fastx FastX <= 1.0.2 - Missing Authorization to Authenticated (Subscriber+) Limited Plugin Installation and Activation CVE-2026-2518 4.3 MediumMay 22, 2026
wpxpo post grid gutenberg blocks for news, magazines, blog websites – postx Post Grid Gutenberg Blocks for News, Magazines, Blog Websites – PostX <= 5.0.5 - Missing Authorization to Limited Post Meta Modification CVE-2026-0718 5.3 MediumApril 16, 2026
wpxpo wowoptin WordPress WowOptin plugin <= 1.4.32 - Broken Access Control vulnerability CVE-2026-39700 5.3 MediumApril 8, 2026
wpxpo wowoptin: next-gen popup maker – create stunning popups and optins for lead generation WowOptin: Next-Gen Popup Maker <= 1.4.29 - Unauthenticated Server-Side Request Forgery via 'link' Parameter in REST API CVE-2026-4302 7.2 HighMarch 21, 2026
wpxpo wowstore – store builder & product blocks for woocommerce WowStore – Store Builder & Product Blocks for WooCommerce <= 4.4.3 - Unauthenticated SQL Injection via 'search' Parameter CVE-2026-2579 7.5 HighMarch 17, 2026
wpxpo wowoptin: next-gen popup maker – create stunning popups and optins for lead generation WowOptin: Next-Gen Popup Maker – Create Stunning Popups and Optins for Lead Generation <= 1.4.24 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Installation CVE-2026-1720 8.8 HighMarch 5, 2026
wpxpo post grid gutenberg blocks for news, magazines, blog websites – postx PostX <= 5.0.8 - Authenticated (Administrator+) Server-Side Request Forgery via REST API Endpoints CVE-2026-1273 7.2 HighMarch 4, 2026
wpxpo wowrevenue – product bundles & bulk discounts WowRevenue <= 2.1.3 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Installation/Activation CVE-2026-2001 8.8 HighFebruary 16, 2026
wpxpo postx WordPress PostX plugin <= 5.0.3 - Broken Access Control vulnerability CVE-2025-69313 7.5 HighJanuary 22, 2026
wpxpo postx WordPress PostX plugin <= 5.0.3 - Sensitive Data Exposure vulnerability CVE-2025-68606 5.3 MediumDecember 24, 2025
wpxpo post grid gutenberg blocks for news, magazines, blog websites – postx Post Grid Gutenberg Blocks for News, Magazines, Blog Websites – PostX <= 5.0.3 - Missing Authorization to Unauthenticated Sensitive Information Exposure CVE-2025-12980 7.5 HighDecember 21, 2025
wpxpo postx WordPress PostX Plugin <= 4.1.35 - Privilege Escalation Vulnerability CVE-2025-55707 7.2 HighDecember 18, 2025
wpxpo postx WordPress PostX plugin <= 4.1.36 - Broken Access Control vulnerability CVE-2025-54751 7.1 HighDecember 18, 2025
wpxpo wowrevenue WordPress WowRevenue plugin <= 1.2.13 - Broken Access Control vulnerability CVE-2025-62070 4.3 MediumOctober 22, 2025
wpxpo wowstore WordPress WowStore plugin <= 4.2.4 - Broken Access Control Vulnerability CVE-2025-39571 4.3 MediumApril 16, 2025
wpxpo postx WordPress PostX plugin <= 4.1.25 - Cross Site Scripting (XSS) Vulnerability CVE-2025-31096 6.5 MediumMarch 28, 2025
wpxpo wowstore WordPress ProductX – Gutenberg WooCommerce Blocks plugin <= 2.7.8 - Broken Access Control vulnerability CVE-2023-45271 4.3 MediumJanuary 2, 2025
wpxpo postx WordPress PostX plugin <= 4.1.15 - Cross Site Scripting (XSS) vulnerability CVE-2024-53818 6.5 MediumDecember 9, 2024
wpxpo postx WordPress PostX plugin <= 4.1.15 - Cross Site Scripting (XSS) vulnerability CVE-2024-50513 5.9 MediumNovember 19, 2024
wpxpo postx, post grid gutenberg blocks for news, magazines, blog websites – postx, postx - gutenberg blocks for post grid +2 more PostX <= 4.1.16 - Missing Authorization to Arbitrary Plugin Installation/Activation CVE-2024-10728 Public exploit EPSS 39.1% 8.8 HighNovember 16, 2024
wpxpo postx WordPress PostX plugin <= 4.1.12 - Cross Site Scripting (XSS) vulnerability CVE-2024-50443 6.5 MediumOctober 28, 2024
unknown post grid gutenberg blocks and wordpress blog plugin, wpxpo postx, wpdownloadmanager gutenberg blocks for wordpress download manager +2 more PostX < 4.1.0 - Contributor+ Stored XSS CVE-2024-4305 6.8 MediumJune 17, 2024
wpxpo postx WordPress PostX plugin <= 3.2.3 - Author+ Post/Page Duplication vulnerability CVE-2024-31246 5.4 MediumJune 9, 2024
wpxpo post grid gutenberg blocks for news, magazines, blog websites – postx Post Grid Gutenberg Blocks and WordPress Blog Plugin – PostX <= 4.1.2 - Missing Authorization to Arbitrary Options Update CVE-2024-5326 Public exploit 8.8 HighMay 30, 2024
wpxpo post grid gutenberg blocks for news, magazines, blog websites – postx Post Grid Gutenberg Blocks and WordPress Blog Plugin – PostX <= 4.1.1 - Authenticated (Author+) Stored Cross-Site Scripting CVE-2024-5223 6.4 MediumMay 30, 2024
wholesale wholesalex WordPress WholesaleX plugin <= 1.3.2 - Unauthenticated Privilege Escalation vulnerability CVE-2024-30542 9.8 CriticalMay 17, 2024
unknown post grid gutenberg blocks and wordpress blog plugin, wpxpo postx +1 more PostX < 4.0.2 - Contributor+ Stored XSS CVE-2024-3239 5.4 MediumMay 13, 2024
wpxpo postx, post grid team by wpxpo postx-gutenberg blocks for post grid +1 more WordPress PostX plugin <= 4.0.1 - Cross Site Scripting (XSS) vulnerability CVE-2024-32564 6.5 MediumApril 18, 2024
wholesale wholesalex WordPress WholesaleX plugin <= 1.3.2 - Unauthenticated PHP Object Injection vulnerability CVE-2024-30224 10.0 CriticalMarch 28, 2024
wholesale wholesalex WordPress WholesaleX plugin <= 1.3.1 - Broken Access Control vulnerability CVE-2024-30234 6.5 MediumMarch 26, 2024
wholesale wholesalex WordPress WholesaleX plugin <= 1.3.1 - Sensitive Data Exposure on User Export vulnerability CVE-2024-30233 6.5 MediumMarch 26, 2024
wpxpo productx – woocommerce builder & gutenberg woocommerce blocks, wowstore +1 more WordPress ProductX – Gutenberg WooCommerce Blocks Plugin <= 3.1.4 is vulnerable to PHP Object Injection CVE-2024-23512 8.7 HighFebruary 12, 2024
unknown postx PostX - Gutenberg Post Grid Blocks < 3.0.6 - Reflected Cross-Site Scripting CVE-2023-3992 6.1 MediumAugust 30, 2023
wpxpo postx, postx – gutenberg post grid blocks +1 more WordPress PostX – Gutenberg Blocks for Post Grid Plugin <= 2.9.9 is vulnerable to Cross Site Scripting (XSS) CVE-2023-36385 7.1 HighJuly 25, 2023
post grid team by wpxpo postx – gutenberg blocks for post grid, wpxpo postx - gutenberg blocks for post grid +1 more PostX Gutenberg Blocks Saved Templates Addon < 2.4.10 - Private Content Disclosure CVE-2021-24661 4.3 MediumSeptember 27, 2021
post grid team by wpxpo postx – gutenberg blocks for post grid, wpxpo postx - gutenberg blocks for post grid +1 more PostX Gutenberg Blocks Saved Templates Addon < 2.4.10 - Contributor+ Stored Cross-Site Scripting CVE-2021-24660 5.4 MediumSeptember 27, 2021
post grid team by wpxpo postx – gutenberg blocks for post grid, wpxpo postx - gutenberg blocks for post grid +1 more PostX Gutenberg Blocks for Post Grid < 2.4.10 - Contributor+ Stored Cross-Site Scripting CVE-2021-24659 5.4 MediumSeptember 27, 2021
post grid team by wpxpo postx – gutenberg blocks for post grid, wpxpo postx - gutenberg blocks for post grid +1 more PostX Gutenberg Blocks for Post Grid < 2.4.10 - Missing Access Controls CVE-2021-24652 6.5 MediumSeptember 27, 2021