Vulnerabilities in WPXPO

36 results
CVE-2026-2579HIGHWowStore – Store Builder & Product Blocks for WooCommerce <= 4.4.3 - Unauthenticated SQL Injection via 'search' ParameterEPSS 0.3%CVE-2025-12980HIGHPost Grid Gutenberg Blocks for News, Magazines, Blog Websites – PostX <= 5.0.3 - Missing Authorization to Unauthenticated Sensitive Information ExposureEPSS 0.3%CVE-2026-1720HIGHWowOptin: Next-Gen Popup Maker – Create Stunning Popups and Optins for Lead Generation <= 1.4.24 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin InstallationEPSS 0.3%CVE-2026-4302HIGHWowOptin: Next-Gen Popup Maker <= 1.4.29 - Unauthenticated Server-Side Request Forgery via 'link' Parameter in REST APIEPSS 0.3%CVE-2026-0718MEDIUMPost Grid Gutenberg Blocks for News, Magazines, Blog Websites – PostX <= 5.0.5 - Missing Authorization to Limited Post Meta ModificationEPSS 0.3%CVE-2024-50443MEDIUMWordPress PostX plugin <= 4.1.12 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2026-5158MEDIUMPostX <= 5.0.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Comments BlockEPSS 0.3%CVE-2026-57686HIGHWordPress WowAddons plugin <= 1.6.14 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2025-54751HIGHWordPress PostX plugin <= 4.1.36 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2026-96840HIGHPost Grid Gutenberg Blocks <= 5.1.0 - Unauthenticated Stored Cross-Site Scripting via display_name User FieldEPSS 0.2%CVE-2025-68606MEDIUMWordPress PostX plugin <= 5.0.3 - Sensitive Data Exposure vulnerabilityEPSS 0.2%CVE-2026-2518MEDIUMFastX <= 1.0.2 - Missing Authorization to Authenticated (Subscriber+) Limited Plugin Installation and ActivationEPSS 0.2%CVE-2025-31096MEDIUMWordPress PostX plugin <= 4.1.25 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.2%CVE-2025-62070MEDIUMWordPress WowRevenue plugin <= 1.2.13 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-8145MEDIUMWholesaleX <= 3.0.8 - Unauthenticated Limited Privilege Escalation via 'process_registration'EPSS 0.2%CVE-2026-39700MEDIUMWordPress WowOptin plugin <= 1.4.32 - Broken Access Control vulnerabilityEPSS 0.2%