roxnor

Top products

The 15 most recently published vulnerabilities affecting roxnor.

• CVE-2026-94500WordPress ElementsKit Elementor addons Lite plugin <= 4.0.5 - Cross Site Scripting (XSS) vulnerability6.5Sep 23, 2026
• CVE-2026-92235WP Ultimate Review <= 2.4.2 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via 'xs_submit_review_data[xs_reviw_summery]' Parameter8.1Sep 22, 2026
• CVE-2026-85575The ShopEngine Elementor WooCommerce Builder Addon – All in One WooCommerce Solution with eCommerce Templates & Woo Widgets <= 4.9.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'shopengine_product_title_header_size' Parameter6.4Sep 15, 2026
• CVE-2026-75971ShopEngine Elementor WooCommerce Builder Addon <= 4.9.4 - Authenticated (Shop Manager+) Privilege Escalation to WXR Import '<wp_option>' Nodes7.2Aug 25, 2026
• CVE-2026-18100MetForm <= 4.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'mf_form_id' Widget Setting6.4Aug 25, 2026
• CVE-2026-76063FundEngine <= 1.8.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'wfp_featured_video_url' Parameter6.4Aug 25, 2026
• CVE-2026-75930FundEngine <= 1.8.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Modification via 'campaign_post' Parameter4.3Aug 25, 2026
• CVE-2026-73993WordPress FundEngine plugin <= 1.7.9 - PHP Object Injection vulnerability9.8Aug 20, 2026
• CVE-2026-32470WordPress FundEngine plugin <= 1.7.9 - PHP Object Injection vulnerability9.8Aug 18, 2026
• CVE-2026-65440WordPress GetGenie plugin <= 4.4.3 - Cross Site Scripting (XSS) vulnerability7.1Jul 27, 2026
• CVE-2026-59560WordPress FundEngine plugin <= 1.7.8 - Broken Access Control vulnerability6.5Jul 27, 2026
• CVE-2026-57406WordPress FundEngine plugin <= 1.7.6 - Broken Access Control vulnerability6.5Jul 13, 2026
• CVE-2026-57316WordPress GetGenie plugin <= 4.4.2 - Sensitive Data Exposure vulnerability6.5Jun 26, 2026
• CVE-2026-4362ElementsKit Elementor Addons <= 3.8.2 - Missing Authorization to Unauthenticated Widget Content Overwrite6.5May 5, 2026
• CVE-2026-5957EmailKit <= 1.6.5 - Authenticated (Author+) Arbitrary File Read via 'emailkit-editor-template' REST Parameter6.5May 5, 2026