IP-DB.com
Türkçe English Deutsch Español
Giriş API Anahtarı Al

wpWax güvenlik açıkları (CVE)

wpWax için yayımlanan CVE kayıtları, en yenisi üstte. Yeni bir açık çıktığında e-posta almak için takip edin.

Directorist: AI-Powered Business Directory, Listings & Classified Ads 10Directorist 8Legal Pages 4post_grid\,_slider_\&_carousel_ultimate 4Product Carousel Slider & Grid Ultimate for WooCommerce 4Post Grid, Slider & Carousel Ultimate – with Shortcode, Gutenberg Block & Elementor Widget 3logo_showcase_ultimate 2Logo Showcase Ultimate – Logo Carousel, Logo Slider & Logo Grid 2FormGent 2FormGent – Next-Gen AI Form Builder for WordPress with Multi-Step, Quizzes, Payments & More 2Team (WordPress plugin) 2HelpGent 1Templatiq 1Legal Pages – Privacy Policy, Terms & Conditions, GDPR, CCPA, and Cookie Notice Generator 1Logo Carousel Slider 1Directorist AddonsKit for Elementor 1Directorist Booking 1Directorist – WordPress Business Directory Plugin with Classified Ads Listings 1product_carosel_slider_\&_grid_ultimate 1
44 sonuç
6.4Orta
CVE-2026-100185

Directorist: AI-Powered Business Directory, Listings & Classified Ads <= 8.10.2.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'phone' Listing Field

wpwax Directorist: AI-Powered Business Directory, Listings & Classified Ads

The Directorist: AI-Powered Business Directory, Listings & Classified Ads plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'phone' Listing Field in all versions up to, and including, 8.10.2.1 due to insufficient input sanitization and out…

8.1Yüksek
CVE-2026-17092

Directorist: AI-Powered Business Directory, Listings & Classified Ads <= 8.10.2.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Listing Deletion via 'listing_id' Parameter

wpwax Directorist: AI-Powered Business Directory, Listings & Classified Ads

The Directorist: AI-Powered Business Directory, Listings & Classified Ads plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 8.10.2.1. This is due to the plugin not properly verifying that a user is authorized to …

7.2Yüksek
CVE-2025-15028

FormGent – Next-Gen AI Form Builder for WordPress with Multi-Step, Quizzes, Payments & More <= 1.9.2 - Unauthenticated Stored Cross-Site Scripting

wpwax FormGent – Next-Gen AI Form Builder for WordPress with Multi-Step, Quizzes, Payments & More

The FormGent – Next-Gen AI Form Builder for WordPress with Multi-Step, Quizzes, Payments & More plugin for WordPress is vulnerable to Stored Cross-Site Scripting via form submission fields in all versions up to, and including, 1.9.2 due to insufficient input …

9.1Kritik
CVE-2026-3141

FormGent <= 1.9.2- Missing Authorization to Unauthenticated Arbitrary File Deletion via 'file_token' Parameter

wpwax FormGent – Next-Gen AI Form Builder for WordPress with Multi-Step, Quizzes, Payments & More

The FormGent plugin for WordPress is vulnerable to unauthorized arbitrary file deletion due to a missing capability check on the /wp-json/formgent/responses/attachments REST API endpoint in all versions up to, and including, 1.9.2 This is due to the REST API …

6.5Orta
CVE-2025-12174

Directorist: AI-Powered Business Directory Plugin with Classified Ads Listings <= 8.5.2 - Missing Authorization to Authenticated (Subscriber+) Data Export and Slug Update

wpwax Directorist: AI-Powered Business Directory, Listings & Classified Ads

The Directorist: AI-Powered Business Directory Plugin with Classified Ads Listings plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the 'directorist_prepare_listings_export_file' and 'directorist_type_slug_change'…

8.1Yüksek
CVE-2025-10488

Directorist: AI-Powered Business Directory Plugin with Classified Ads Listings <= 8.4.8 - Authenticated (Subscriber+) Arbitrary File Move

wpwax Directorist: AI-Powered Business Directory, Listings & Classified Ads

The Directorist: AI-Powered Business Directory Plugin with Classified Ads Listings plugin for WordPress is vulnerable to arbitrary file move due to insufficient file path validation in the add_listing_action AJAX action in all versions up to, and including, 8…

8.1Yüksek
CVE-2025-1570

Directorist: AI-Powered Business Directory Plugin with Classified Ads Listings <= 8.1 - Privilege Escalation and Account Takeover via Weak OTP

wpwax Directorist: AI-Powered Business Directory, Listings & Classified Ads

The Directorist: AI-Powered Business Directory Plugin with Classified Ads Listings plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 8.1. This is due to the directorist_generate_password_rese…

5.3Orta
CVE-2024-12041

Directorist – AI-Powered WordPress Business Directory Plugin with Classified Ads Listings <= 8.0.12 - Unauthenticated User Information Exposure

wpwax Directorist: AI-Powered Business Directory, Listings & Classified Ads

The Directorist: AI-Powered WordPress Business Directory Plugin with Classified Ads Listings plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 8.0.12 via the /wp-json/directorist/v1/users/ endpoint. This makes it…

6.5Orta
CVE-2025-24782

WordPress Post Grid, Slider & Carousel Ultimate – with Shortcode, Gutenberg Block & Elementor Widget plugin <= 1.6.10 - Local File Inclusion vulnerability

wpWax Post Grid, Slider & Carousel Ultimate

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in wpWax Post Grid, Slider & Carousel Ultimate post-grid-carousel-ultimate allows PHP Local File Inclusion.This issue affects Post Grid, Slid…