Wpwax vulnerabilities
46 CVEs and advisories name Wpwax as an affected vendor, newest first. Follow it as a feed.
- CVE-2024-44048WordPress Product Carousel Slider & Grid Ultimate for WooCommerce plugin <= 1.9.10 - Authenticated Local File Inclusion vulnerability
- CVE-2024-8046Logo Showcase Ultimate – Logo Carousel, Logo Slider & Logo Grid <= 1.4.1 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
- CVE-2024-33929WordPress Directorist plugin <= 7.8.6 - Broken Access Control vulnerability
- CVE-2024-32451WordPress Legal Pages plugin <= 1.4.2 - Cross Site Request Forgery (CSRF) vulnerability
- CVE-2024-29925WordPress Post Grid, Slider & Carousel Ultimate plugin <= 1.6.6 - Cross Site Scripting (XSS) vulnerability
- CVE-2023-50886WordPress Legal Pages plugin <= 1.3.7 - CSRF + Broken Access Control vulnerability
- CVE-2024-1950Product Carousel Slider & Grid Ultimate for WooCommerce <= 1.9.7 - Authenticated(Contributor+) PHP Object Injection
- CVE-2024-1951Logo Showcase Ultimate – Logo Carousel, Logo Slider & Logo Grid <= 1.3.8 - Authenticated(Contributor+) PHP Object Injection
- CVE-2024-2006Post Grid, Slider & Carousel Ultimate – with Shortcode, Gutenberg Block & Elementor Widget <= 1.6.7 - Authenticated (Contributor+) PHP Object Injection in outpost_shortcode_metabox_markup
- CVE-2024-1322Directorist <= 7.8.4 - Missing Authorization to Unauthenticated Settings Change
- CVE-2023-47824WordPress Legal Pages Plugin <= 1.3.8 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-41798WordPress Directorist Plugin <= 7.7.1 is vulnerable to CSV Injection
- CVE-2023-1889Directorist <= 7.5.4 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary Post Deletion in listing_task
- CVE-2023-1888Directorist <= 7.5.4 - Authenticated (Subscriber+) Arbitrary User Password Reset to Privilege Escalation
- CVE-2022-34650WordPress Team plugin <= 1.2.6 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities
- CVE-2022-34853WordPress Team plugin <= 1.2.6 - Multiple Authenticated Persistent Cross-Site Scripting (XSS) vulnerabilities