Roxnor vulnerabilities
94 CVEs and advisories name Roxnor as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-24356WordPress GetGenie plugin <= 4.3.0 - Broken Access Control vulnerability
- CVE-2026-1003GetGenie – AI Content Writer with Keyword Research & SEO Tracking Tools <= 4.3.0 - Missing Authorization to Authenticated (Author+) Arbitrary Post Deletion
- CVE-2025-14059EmailKit <= 1.6.1 - Authenticated (Author+) Arbitrary File Read via Path Traversal
- CVE-2025-14441Popupkit <= 2.2.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Subscriber Data Deletion
- CVE-2025-69026WordPress PopupKit plugin <= 2.1.5 - Sensitive Data Exposure vulnerability
- CVE-2025-14314WordPress PopupKit plugin <= 2.1.5 - SQL Injection vulnerability
- CVE-2025-63057WordPress Wp Ultimate Review plugin <= 2.3.7 - Cross Site Scripting (XSS) vulnerability
- CVE-2025-13620Wp Social Login and Register Social Counter <= 3.1.3 - Missing Authorization in Cache REST Endpoints to Social Counter Tampering
- CVE-2025-12358ShopEngine <= 4.8.5 - Cross-Site Request Forgery to Wishlist Manipulation
- CVE-2025-11888ShopEngine Elementor WooCommerce Builder Addon – All in One WooCommerce Solution <= 4.8.4 - Incorrect Authorization to Authenticated (Editor+) License Status Update
- CVE-2025-10861Popup builder with Gamification, Multi-Step Popups, Page-Level Targeting, and WooCommerce Triggers <= 2.1.4 - Unauthenticated Server-Side Request Forgery
- CVE-2025-10862Popup builder with Gamification, Multi-Step Popups, Page-Level Targeting, and WooCommerce Triggers <= 2.1.3 - Unauthenticated SQL Injection via 'id'
- CVE-2025-60106WordPress EmailKit Plugin <= 1.6.0 - Arbitrary Content Deletion Vulnerability
- CVE-2025-10173ShopEngine Elementor WooCommerce Builder Addon – All in One WooCommerce Solution <= 4.8.3 - Insufficient Authorization to Authenticated (Editor+) Settings Update
- CVE-2025-48302WordPress FundEngine Plugin <= 1.7.4 - Local File Inclusion Vulnerability
- CVE-2025-5684MetForm <= 4.0.1 - Authenticated(Contributor+) Stored Cross-Site Scripting via `mf-template` DOM Element
- CVE-2025-3614ElementsKit Elementor Addons and Templates <= 3.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Widget
- CVE-2025-4479ElementsKit Lite <= 3.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Comparison Widget
- CVE-2025-47459WordPress WP Fundraising Donation and Crowdfunding Platform plugin <= 1.7.3 - Cross Site Request Forgery (CSRF) Vulnerability
- CVE-2024-11180ElementsKit Elementor addons <= 3.4.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
- CVE-2025-30914WordPress Metform Elementor Contact Form Builder plugin <= 3.9.7 - Server Side Request Forgery (SSRF) vulnerability
- CVE-2025-1506Wp Social Login and Register Social Counter <= 3.1.0 - Cross-Site Request Forgery to Settings Update
- CVE-2025-0968ElementsKit Elementor addons <= 3.4.0 - Unauthenticated Information Exposure via get_megamenu_content Function
- CVE-2025-1005ElementsKit Elementor addons <= 3.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Accordion Widget
- CVE-2023-50903WordPress Metform Elementor Contact Form Builder plugin <= 3.4.0 - Broken Access Control vulnerability
- CVE-2024-37255WordPress ElementsKit Lite plugin <= 3.1.4 - Unauthenticated Broken Access Control vulnerability
- CVE-2024-9501Wp Social Login and Register Social Counter <= 3.0.7 - Authentication Bypass via WordPress.com OAuth provider
- CVE-2024-10091ElementsKit Elementor addons <= 3.2.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Comparison Widget
- CVE-2024-8546ElementsKit Elementor addons <= 3.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Video Widget
- CVE-2023-0714Metform Elementor Contact Form Builder <= 3.2.4 - Unauthenticated Double-Extension Arbitrary File Upload