Vulnerabilities in wpwax
46 resultsCVE-2026-49073HIGHWordPress Directorist Booking plugin <= 3.0.3 - SQL Injection vulnerabilityEPSS 0.2%CVE-2024-32451MEDIUMWordPress Legal Pages plugin <= 1.4.2 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.2%CVE-2025-12174MEDIUMDirectorist: AI-Powered Business Directory Plugin with Classified Ads Listings <= 8.5.2 - Missing Authorization to Authenticated (Subscriber+) Data Export and Slug UpdateEPSS 0.2%CVE-2023-50886MEDIUMWordPress Legal Pages plugin <= 1.3.7 - CSRF + Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-122661MEDIUMWordPress Directorist plugin <= 8.10.7 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-119497MEDIUMWordPress Directorist plugin <= 8.10.6 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%