Skip to contentXootix Login\/signup Popup vulnerabilities
- xootix login & register customizer – popup | slider | inline | woocommerce, login\/signup popup +1 moreLogin/Signup Popup ( Inline Form + Woocommerce ) <= 2.8.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via xoo_el_action ShortcodeCVE-2025-10646.4 Medium
- xootix login/signup popup ( inline form + woocommerce ), login\/signup popup +1 moreLogin/Signup Popup ( Inline Form + Woocommerce ) 2.7.1 - 2.7.2 - Missing Authorization to Arbitrary Options ExposureCVE-2024-56654.3 Medium
- xootix login & register customizer – popup | slider | inline | woocommerce, login\/signup popup, otp login & register woocommerce +5 more +7 moreXootiX Framework <= Various Plugin Versions - Missing Authorization to Arbitrary Options UpdateCVE-2024-5324Public exploit8.8 High
- xootix login & register customizer – popup | slider | inline | woocommerce, login\/signup popup +1 moreLogin/Signup Popup < 1.5 - Missing AuthorizationCVE-2020-367157.4 High
- xootix login/signup popup, side cart woocommerce (ajax), side cart woocommerce +3 more +5 moreXootiX Plugins <= Various Versions Cross-Site Request Forgery to Arbitrary Options UpdateCVE-2022-02158.8 High