IP-DB.com
Türkçe English Deutsch Español
Anmelden API-Schlüssel holen

wpWax Schwachstellen (CVE)

Für wpWax veröffentlichte CVE-Einträge, neueste zuerst. Folgen Sie, um bei neuen Einträgen eine E-Mail zu erhalten.

Directorist: AI-Powered Business Directory, Listings & Classified Ads 10Directorist 8post_grid\,_slider_\&_carousel_ultimate 4Product Carousel Slider & Grid Ultimate for WooCommerce 4Legal Pages 4Post Grid, Slider & Carousel Ultimate – with Shortcode, Gutenberg Block & Elementor Widget 3logo_showcase_ultimate 2Logo Showcase Ultimate – Logo Carousel, Logo Slider & Logo Grid 2FormGent 2FormGent – Next-Gen AI Form Builder for WordPress with Multi-Step, Quizzes, Payments & More 2Team (WordPress plugin) 2Logo Carousel Slider 1Directorist AddonsKit for Elementor 1Directorist Booking 1Directorist – WordPress Business Directory Plugin with Classified Ads Listings 1product_carosel_slider_\&_grid_ultimate 1HelpGent 1Templatiq 1Legal Pages – Privacy Policy, Terms & Conditions, GDPR, CCPA, and Cookie Notice Generator 1
44 Ergebnisse
6.4Mittel
CVE-2026-100185

Directorist: AI-Powered Business Directory, Listings & Classified Ads <= 8.10.2.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'phone' Listing Field

wpwax Directorist: AI-Powered Business Directory, Listings & Classified Ads

The Directorist: AI-Powered Business Directory, Listings & Classified Ads plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'phone' Listing Field in all versions up to, and including, 8.10.2.1 due to insufficient input sanitization and out…

8.1Hoch
CVE-2026-17092

Directorist: AI-Powered Business Directory, Listings & Classified Ads <= 8.10.2.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Listing Deletion via 'listing_id' Parameter

wpwax Directorist: AI-Powered Business Directory, Listings & Classified Ads

The Directorist: AI-Powered Business Directory, Listings & Classified Ads plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 8.10.2.1. This is due to the plugin not properly verifying that a user is authorized to …

7.2Hoch
CVE-2025-15028

FormGent – Next-Gen AI Form Builder for WordPress with Multi-Step, Quizzes, Payments & More <= 1.9.2 - Unauthenticated Stored Cross-Site Scripting

wpwax FormGent – Next-Gen AI Form Builder for WordPress with Multi-Step, Quizzes, Payments & More

The FormGent – Next-Gen AI Form Builder for WordPress with Multi-Step, Quizzes, Payments & More plugin for WordPress is vulnerable to Stored Cross-Site Scripting via form submission fields in all versions up to, and including, 1.9.2 due to insufficient input …

9.1Kritisch
CVE-2026-3141

FormGent <= 1.9.2- Missing Authorization to Unauthenticated Arbitrary File Deletion via 'file_token' Parameter

wpwax FormGent – Next-Gen AI Form Builder for WordPress with Multi-Step, Quizzes, Payments & More

The FormGent plugin for WordPress is vulnerable to unauthorized arbitrary file deletion due to a missing capability check on the /wp-json/formgent/responses/attachments REST API endpoint in all versions up to, and including, 1.9.2 This is due to the REST API …

6.5Mittel
CVE-2025-12174

Directorist: AI-Powered Business Directory Plugin with Classified Ads Listings <= 8.5.2 - Missing Authorization to Authenticated (Subscriber+) Data Export and Slug Update

wpwax Directorist: AI-Powered Business Directory, Listings & Classified Ads

The Directorist: AI-Powered Business Directory Plugin with Classified Ads Listings plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the 'directorist_prepare_listings_export_file' and 'directorist_type_slug_change'…

8.1Hoch
CVE-2025-10488

Directorist: AI-Powered Business Directory Plugin with Classified Ads Listings <= 8.4.8 - Authenticated (Subscriber+) Arbitrary File Move

wpwax Directorist: AI-Powered Business Directory, Listings & Classified Ads

The Directorist: AI-Powered Business Directory Plugin with Classified Ads Listings plugin for WordPress is vulnerable to arbitrary file move due to insufficient file path validation in the add_listing_action AJAX action in all versions up to, and including, 8…

8.1Hoch
CVE-2025-1570

Directorist: AI-Powered Business Directory Plugin with Classified Ads Listings <= 8.1 - Privilege Escalation and Account Takeover via Weak OTP

wpwax Directorist: AI-Powered Business Directory, Listings & Classified Ads

The Directorist: AI-Powered Business Directory Plugin with Classified Ads Listings plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 8.1. This is due to the directorist_generate_password_rese…

5.3Mittel
CVE-2024-12041

Directorist – AI-Powered WordPress Business Directory Plugin with Classified Ads Listings <= 8.0.12 - Unauthenticated User Information Exposure

wpwax Directorist: AI-Powered Business Directory, Listings & Classified Ads

The Directorist: AI-Powered WordPress Business Directory Plugin with Classified Ads Listings plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 8.0.12 via the /wp-json/directorist/v1/users/ endpoint. This makes it…

6.5Mittel
CVE-2025-24782

WordPress Post Grid, Slider & Carousel Ultimate – with Shortcode, Gutenberg Block & Elementor Widget plugin <= 1.6.10 - Local File Inclusion vulnerability

wpWax Post Grid, Slider & Carousel Ultimate

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in wpWax Post Grid, Slider & Carousel Ultimate post-grid-carousel-ultimate allows PHP Local File Inclusion.This issue affects Post Grid, Slid…