CVE Tools
Track your stack

Wpxpo

4 CVEs tracked since 2021. Since Sep 2021, none of them reached CISA KEV.

Wpxpo CVEs per month

Sep 2021 to Oct 2026. Point at a month, or focus the strip and use the arrow keys.
Wpxpo CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2021-0940
2021-102 or fewer
2021-112 or fewer
2021-122 or fewer
2022-012 or fewer
2022-022 or fewer
2022-033 or fewer
2022-043 or fewer
2022-053 or fewer
2022-063 or fewer
2022-073 or fewer
2022-083 or fewer
2022-093 or fewer
2022-102 or fewer
2022-113 or fewer
2022-123 or fewer
2023-013 or fewer
2023-023 or fewer
2023-03no snapshot
2023-043 or fewer
2023-053 or fewer
2023-064 or fewer
2023-073 or fewer
2023-084 or fewer
2023-093 or fewer
2023-104 or fewer
2023-114 or fewer
2023-124 or fewer
2024-014 or fewer
2024-024 or fewer
2024-034 or fewer
2024-044 or fewer
2024-055 or fewer
2024-064 or fewer
2024-074 or fewer
2024-084 or fewer
2024-093 or fewer
2024-104 or fewer
2024-114 or fewer
2024-123 or fewer
2025-014 or fewer
2025-023 or fewer
2025-035 or fewer
2025-044 or fewer
2025-054 or fewer
2025-064 or fewer
2025-075 or fewer
2025-084 or fewer
2025-094 or fewer
2025-104 or fewer
2025-114 or fewer
2025-125 or fewer
2026-015 or fewer
2026-025 or fewer
2026-037 or fewer
2026-046 or fewer
2026-057 or fewer
2026-067 or fewer
2026-077 or fewer
2026-088 or fewer
2026-099 or fewer
2026-106 or fewer

Products

The products that kept showing up in Wpxpo's monthly top three, with their CVEs summed over those months.

  1. Postx - Gutenberg Blocks For Post Grid41 month

Latest CVEs

The 15 most recently published vulnerabilities affecting Wpxpo.

  1. CVE-2026-8145WholesaleX <= 3.0.8 - Unauthenticated Limited Privilege Escalation via 'process_registration'5.4
  2. CVE-2026-96840Post Grid Gutenberg Blocks <= 5.1.0 - Unauthenticated Stored Cross-Site Scripting via display_name User Field7.2
  3. CVE-2026-5158PostX <= 5.0.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Comments Block6.4
  4. CVE-2026-17161WowStore <= 4.4.24 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'filterMobileText' Block Attribute6.4
  5. CVE-2026-17162WowStore <= 4.4.24 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'currentPostId' Block Attribute6.4
  6. CVE-2026-15100Post Grid Gutenberg Blocks <= 5.0.32 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'searchnoresult' Block Attribute6.4
  7. CVE-2026-57377WordPress WowAddons plugin <= 1.6.8 - Broken Access Control vulnerability6.5
  8. CVE-2026-13253Post Grid Gutenberg Blocks for News, Magazines, Blog Websites <= 5.0.31 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'moreResultsText' Block Attribute6.4
  9. CVE-2026-57686WordPress WowAddons plugin <= 1.6.14 - Cross Site Scripting (XSS) vulnerability7.1
  10. CVE-2026-2518FastX <= 1.0.2 - Missing Authorization to Authenticated (Subscriber+) Limited Plugin Installation and Activation4.3
  11. CVE-2026-0718Post Grid Gutenberg Blocks for News, Magazines, Blog Websites – PostX <= 5.0.5 - Missing Authorization to Limited Post Meta Modification5.3
  12. CVE-2026-39700WordPress WowOptin plugin <= 1.4.32 - Broken Access Control vulnerability5.3
  13. CVE-2026-4302WowOptin: Next-Gen Popup Maker <= 1.4.29 - Unauthenticated Server-Side Request Forgery via 'link' Parameter in REST API7.2
  14. CVE-2026-2579WowStore – Store Builder & Product Blocks for WooCommerce <= 4.4.3 - Unauthenticated SQL Injection via 'search' Parameter7.5
  15. CVE-2026-1720WowOptin: Next-Gen Popup Maker – Create Stunning Popups and Optins for Lead Generation <= 1.4.24 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Installation8.8

The record

Peak rank
#135 in Sep 2021
Busiest month shown
Sep 2021, 4 CVEs
Months with a KEV entry
0 since Sep 2021
Monthly snapshots
1 since 2021
Wpxpo's full record, month by month