Vulnerability index

Browse CVEs

6 matching

Cards Compact

Filters 1 Clear all

Keyword

Severity

Any Critical High Medium Low

Technology

Recency

Analysis

Fix

Sort

Exploited (KEV) only

Filters apply as you choose them.

MEDIUM 5.4 CVE-2025-1064 The Login/Signup Popup ( Inline Form + Woocommerce ) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's xoo_el_action…

Login\/signup Popup 2.8.6+ Fix from $1,6002025-02-20 MEDIUM 6.1 CVE-2024-8724 The Waitlist Woocommerce ( Back in stock notifier ) plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_…

Waitlist Woocommerce 2.7.6+ Fix from $1,6002024-09-14 HIGH 8.8 CVE-2024-5324 Multiple plugins for WordPress utilizing the XootiX Framework are vulnerable to unauthorized modification of data due to a missing capability check o…

Login\/signup Popup 2.6.1 / 2.6.2+ Fix from $1,9502024-06-06 HIGH 8.8 CVE-2022-45376 Cross-Site Request Forgery (CSRF) vulnerability in XootiX Side Cart Woocommerce (Ajax) < 2.1 versions.

Side Cart Woocommerce 2.1+ Fix from $1,9502023-05-22 HIGH 8.1 CVE-2023-2706 The OTP Login Woocommerce & Gravity Forms plugin for WordPress is vulnerable to authentication bypass. This is due to the fact that when generating O…

Otp Login Woocommerce \& Gravity Forms 2.3+ Fix from $1,9502023-05-17 HIGH 8.8 CVE-2022-0215 The Login/Signup Popup, Waitlist Woocommerce ( Back in stock notifier ), and Side Cart Woocommerce (Ajax) WordPress plugins by XootiX are vulnerable …

Login\/signup Popup after 2.5.1 Fix from $1,9502022-01-18