Roxnor vulnerabilities
94 CVEs and advisories name Roxnor as an affected vendor, newest first. Follow it as a feed.
- CVE-2024-6698FundEngine – Donation and Crowdfunding Platform <= 1.7.0 - Authenticated (Subscriber+) Privilege Escalation
- CVE-2024-6455ElementsKit Elementor addons <= 3.2.0 - Unauthenticated Information Exposure via ekit_widgetarea_content Function
- CVE-2024-4266MetForm – Contact Form, Survey, Quiz, & Custom Form Builder for Elementor <= 3.8.8 - Unauthenticated Sensitive Information Exposure
- CVE-2024-21746WordPress Wp Ultimate Review plugin <= 2.3.6 - IP limit Bypass vulnerability
- CVE-2024-33570WordPress MetForm plugin <= 3.8.3 - Broken Access Control vulnerability
- CVE-2024-3499ElementsKit Elementor addons <= 3.1.0 - Authenticated (Contributor+) Local File Inclusion via Onepage Scroll Module
- CVE-2024-32505WordPress ElementsKit Elementor addons plugin <= 3.0.6 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-2803ElementsKit Elementor addons <= 3.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget
- CVE-2024-2791Metform Elementor Contact Form Builder <= 3.8.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Widgets
- CVE-2024-1238ElementsKit Elementor addons <= 3.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
- CVE-2024-2047ElementsKit Elementor addons <= 3.0.6 - Authenticated (Contributor+) Local File Inclusion in render_raw
- CVE-2023-6525ElementsKit Elementor addons <= 3.0.3 - Authenticated(Editor+) Stored Cross-Site Scripting
- CVE-2024-2042ElementsKit Elementor addons <= 3.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Accordion Widget
- CVE-2024-1239ElementsKit Elementor addons <= 3.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
- CVE-2024-1763Wp Social Login and Register Social Counter <= 3.0.0 - Missing Authorization to Unauthenticated Social Login/Share Status Update
- CVE-2024-1585Metform Elementor Contact Form Builder <= 3.8.3 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode
- CVE-2023-6582ElementsKit Lite <= 3.0.3 - Unauthenticated Sensitive Information Exposure
- CVE-2023-6788Metform Elementor Contact Form Builder <= 3.8.1 - Cross-Site Request Forgery
- CVE-2023-0689Metform Elementor Contact Form Builder <= 3.3.1 - Authenticated (Subscriber+) Information Disclosure via 'mf_first_name' shortcode
- CVE-2023-2517Metform Elementor Contact Form Builder <= 3.3.2 - Cross-Site Request Forgery via permalink_setup
- CVE-2023-0692Metform Elementor Contact Form Builder <= 3.3.1 - Authenticated (Subscriber+) Information Disclosure via 'mf_payment_status' shortcode
- CVE-2023-0721Metform Elementor Contact Form Builder <= 3.3.0 - Unauthenticated CSV Injection
- CVE-2023-0708Metform Elementor Contact Form Builder <= 3.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via mf_first_name shortcode
- CVE-2023-0691Metform Elementor Contact Form Builder <= 3.3.1 - Authenticated (Subscriber+) Information Disclosure via mf_last_name shortcode
- CVE-2023-0710Metform Elementor Contact Form Builder <= 3.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via mf_thankyou shortcode
- CVE-2023-0688Metform Elementor Contact Form Builder <= 3.3.1 - Authenticated (Subscriber+) Information Disclosure via mf_thankyou shortcode
- CVE-2023-1843Metform Elementor Contact Form Builder <= 3.3.0 - Missing Authorization
- CVE-2023-0709Metform Elementor Contact Form Builder <= 3.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via mf_last_name shortcode
- CVE-2023-0693Metform Elementor Contact Form Builder <= 3.3.1 - Authenticated (Subscriber+) Information Disclosure via 'mf_transaction_id' shortcode
- CVE-2023-0695Metform Elementor Contact Form Builder <= 3.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via mf shortcode