Wpwax - vulnerabilities (CVEs)

52 CVEs in 33 products, 3 in the last 30 days, newest from 2026-10-14.

Products

• Directorist - 13 CVEs
• Directorist Ai-powered Business Directory - 10 CVEs
• Listings Classified Ads - 10 CVEs
• Post Grid - 5 CVEs
• Post Grid, Slider & Carousel Ultimate - 5 CVEs
• Legal Pages - 4 CVEs
• Product Carousel Slider Grid Ultimate For Woocommerce - 4 CVEs
• Gutenberg Block Elementor Widget - 3 CVEs
• Slider Carousel Ultimate With Shortcode - 3 CVEs
• Formgent - 2 CVEs
• Formgent Next-gen Ai Form Builder For Wordpress With Multi-step - 2 CVEs
• Logo Showcase Ultimate Logo Carousel - 2 CVEs
• Logo Slider Logo Grid - 2 CVEs
• Payments More - 2 CVEs
• Quizzes - 2 CVEs
• Slider Carousel Ultimate - 2 CVEs
• Team - 2 CVEs
• Team Wordpress Plugin - 2 CVEs
• And Cookie Notice Generator - 1 CVEs
• Ccpa - 1 CVEs
• Directorist Addonskit For Elementor - 1 CVEs
• Directorist Booking - 1 CVEs
• Directorist Wordpress Business Directory Plugin With Classified Ads Listings - 1 CVEs
• Gdpr - 1 CVEs
• Helpgent - 1 CVEs
• Legal Pages Privacy Policy - 1 CVEs
• Logo Carousel Slider - 1 CVEs
• Logo Showcase Ultimate - 1 CVEs
• Product Carosel Slider & Grid Ultimate - 1 CVEs
• Product Carousel Slider & Grid Ultimate For Woocommerce - 1 CVEs
• Templatiq - 1 CVEs
• Terms Conditions - 1 CVEs
• Post Grid Slider Carousel Ultimate With Shortcode Gutenberg Block Elementor Widget - 0 CVEs

Newest CVEs of Wpwax

• CVE-2026-100185 - CVSS 6.4 (medium), 2026-10-14: The Directorist: AI-Powered Business Directory, Listings & Classified Ads plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'phone'…
• CVE-2026-17092 - CVSS 8.1 (high), 2026-10-14: The Directorist: AI-Powered Business Directory, Listings & Classified Ads plugin for WordPress is vulnerable to authorization bypass in all versions up to,…
• CVE-2026-94499 - CVSS 7.1 (high), 2026-09-30: Subscriber Broken Access Control in FormGent <= 1.12.2 versions.
• CVE-2026-32474 - CVSS 9.9 (critical), 2026-08-18: Contributor Arbitrary File Upload in Templatiq <= 0.2.5 versions.
• CVE-2025-15028 - CVSS 7.2 (high), 2026-08-06: The FormGent – Next-Gen AI Form Builder for WordPress with Multi-Step, Quizzes, Payments & More plugin for WordPress is vulnerable to Stored Cross-Site…
• CVE-2026-3141 - CVSS 9.1 (critical), 2026-08-01: The FormGent plugin for WordPress is vulnerable to unauthorized arbitrary file deletion due to a missing capability check on the…
• CVE-2026-59518 - CVSS 9.8 (critical), 2026-07-13: Deserialization of Untrusted Data vulnerability in wpWax Directorist directorist allows Object Injection.This issue affects Directorist: from n/a through <=…
• CVE-2026-49073 - CVSS 8.5 (high), 2026-06-16: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in wpWax Directorist Booking allows Blind SQL Injection.…
• CVE-2026-39509 - CVSS 5.3 (medium), 2026-04-08: Missing Authorization vulnerability in wpWax Directorist directorist allows Exploiting Incorrectly Configured Access Control Security Levels.This issue…
• CVE-2026-22460 - CVSS 8.6 (high), 2026-03-05: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in wpWax FormGent formgent allows Path Traversal.This issue…
• CVE-2025-68069 - CVSS 7.1 (high), 2026-02-20: Missing Authorization vulnerability in wpWax Directorist directorist allows Exploiting Incorrectly Configured Access Control Security Levels.This issue…
• CVE-2025-64250 - CVSS 4.7 (medium), 2025-12-16: URL Redirection to Untrusted Site ('Open Redirect') vulnerability in wpWax Directorist directorist allows Phishing.This issue affects Directorist: from n/a…
• CVE-2025-66077 - CVSS 5.3 (medium), 2025-11-21: Missing Authorization vulnerability in wpWax Legal Pages legal-pages allows Exploiting Incorrectly Configured Access Control Security Levels.This issue…
• CVE-2025-12174 - CVSS 6.5 (medium), 2025-11-19: The Directorist: AI-Powered Business Directory Plugin with Classified Ads Listings plugin for WordPress is vulnerable to unauthorized access due to a missing…
• CVE-2025-10488 - CVSS 8.1 (high), 2025-10-25: The Directorist: AI-Powered Business Directory Plugin with Classified Ads Listings plugin for WordPress is vulnerable to arbitrary file move due to…
• CVE-2025-48242 - CVSS 6.5 (medium), 2025-05-19: Missing Authorization vulnerability in wpWax Legal Pages legal-pages allows Exploiting Incorrectly Configured Access Control Security Levels.This issue…
• CVE-2025-32658 - CVSS 9.8 (critical), 2025-04-17: Deserialization of Untrusted Data vulnerability in wpWax HelpGent helpgent allows Object Injection.This issue affects HelpGent: from n/a through <= 2.2.5.
• CVE-2025-39525 - CVSS 6.5 (medium), 2025-04-16: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpWax Logo Carousel Slider logo-carousel-slider allows…
• CVE-2025-32499 - CVSS 6.5 (medium), 2025-04-09: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in wpWax Logo Showcase Ultimate…
• CVE-2025-31857 - CVSS 6.5 (medium), 2025-04-01: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpWax Directorist AddonsKit for Elementor…
• CVE-2025-2224 - CVSS 5.3 (medium), 2025-03-25: The Directorist: AI-Powered Business Directory Plugin with Classified Ads Listings plugin for WordPress is vulnerable to unauthorized access and modification…
• CVE-2025-1570 - CVSS 9.8 (critical), 2025-02-28: The Directorist: AI-Powered Business Directory Plugin with Classified Ads Listings plugin for WordPress is vulnerable to privilege escalation via account…
• CVE-2024-12041 - CVSS 5.3 (medium), 2025-02-01: The Directorist: AI-Powered WordPress Business Directory Plugin with Classified Ads Listings plugin for WordPress is vulnerable to Information Exposure in all…
• CVE-2025-24782 - CVSS 8.8 (high), 2025-01-27: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in wpWax Post Grid, Slider & Carousel…
• CVE-2025-24681 - CVSS 5.9 (medium), 2025-01-24: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpWax Product Carousel Slider & Grid Ultimate for…
• CVE-2024-13409 - CVSS 8.8 (high), 2025-01-24: The Post Grid, Slider & Carousel Ultimate – with Shortcode, Gutenberg Block & Elementor Widget plugin for WordPress is vulnerable to Local File Inclusion in…
• CVE-2024-13408 - CVSS 8.8 (high), 2025-01-24: The Post Grid, Slider & Carousel Ultimate – with Shortcode, Gutenberg Block & Elementor Widget plugin for WordPress is vulnerable to Local File Inclusion in…
• CVE-2024-12040 - CVSS 8.8 (high), 2024-12-12: The Product Carousel Slider & Grid Ultimate for WooCommerce plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including,…
• CVE-2024-44048 - CVSS 6.5 (medium), 2024-09-23: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in wpWax Product Carousel Slider & Grid…
• CVE-2024-8046 - CVSS 6.4 (medium), 2024-08-27: The Logo Showcase Ultimate – Logo Carousel, Logo Slider & Logo Grid plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in…