wpwax

Top products

The 15 most recently published vulnerabilities affecting wpwax.

• CVE-2025-15028FormGent – Next-Gen AI Form Builder for WordPress with Multi-Step, Quizzes, Payments & More <= 1.9.2 - Unauthenticated Stored Cross-Site Scripting7.2Aug 6, 2026
• CVE-2026-3141FormGent <= 1.9.2- Missing Authorization to Unauthenticated Arbitrary File Deletion via 'file_token' Parameter9.1Aug 1, 2026
• CVE-2026-59518WordPress Directorist plugin <= 8.8.2 - PHP Object Injection vulnerability9.8Jul 13, 2026
• CVE-2026-49073WordPress Directorist Booking plugin <= 3.0.3 - SQL Injection vulnerability8.5Jun 16, 2026
• CVE-2026-39509WordPress Directorist plugin <= 8.5.10 - Broken Access Control vulnerability5.3Apr 8, 2026
• CVE-2026-22460WordPress FormGent plugin <= 1.7.0 - Arbitrary File Deletion vulnerability8.6Mar 5, 2026
• CVE-2025-68069WordPress Directorist plugin <= 8.6.6 - Broken Access Control vulnerability7.1Feb 20, 2026
• CVE-2025-64250WordPress Directorist plugin <= 8.6.6 - Open Redirection vulnerability4.7Dec 16, 2025
• CVE-2025-66077WordPress Legal Pages plugin <= 1.4.6 - Broken Access Control vulnerability5.3Nov 21, 2025
• CVE-2025-12174Directorist: AI-Powered Business Directory Plugin with Classified Ads Listings <= 8.5.2 - Missing Authorization to Authenticated (Subscriber+) Data Export and Slug Update6.5Nov 19, 2025
• CVE-2025-10488Directorist: AI-Powered Business Directory Plugin with Classified Ads Listings <= 8.4.8 - Authenticated (Subscriber+) Arbitrary File Move8.1Oct 25, 2025
• CVE-2025-48242WordPress Legal Pages plugin <= 1.4.5 - Broken Access Control Vulnerability6.5May 19, 2025
• CVE-2025-32658WordPress HelpGent plugin <= 2.2.5 - PHP Object Injection vulnerability9.8Apr 17, 2025
• CVE-2025-39525WordPress Logo Carousel Slider plugin <= 2.1.3 - Cross Site Scripting (XSS) Vulnerability6.5Apr 16, 2025
• CVE-2025-32499WordPress Logo Showcase Ultimate plugin <= 1.4.4 - Local File Inclusion vulnerability6.5Apr 9, 2025