Xootix ≫ Login/signup Popup

6 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.

5.9

CVE-2025-50027

EPSS 0.03%
Veröffentlicht 20.06.2025 15:15:29
Zuletzt bearbeitet 23.06.2025 20:16:40

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in xootix Login/Signup Popup allows Stored XSS. This issue affects Login/Signup Popup: from n/a through 2.9.4.

5.4

CVE-2025-1064

EPSS 0.08%
Veröffentlicht 20.02.2025 09:15:09
Zuletzt bearbeitet 25.02.2025 20:41:01

The Login/Signup Popup ( Inline Form + Woocommerce ) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's xoo_el_action shortcode in all versions up to, and including, 2.8.5 due to insufficient input sanitization and out...

4.3

CVE-2024-5665

EPSS 0.24%
Veröffentlicht 06.06.2024 08:15:40
Zuletzt bearbeitet 21.11.2024 09:48:07

The Login/Signup Popup ( Inline Form + Woocommerce ) plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the ‘export_settings’ function in versions 2.7.1 to 2.7.2. This makes it possible for authenti...

8.8

CVE-2024-5324

EPSS 43.73%
Veröffentlicht 06.06.2024 02:15:54
Zuletzt bearbeitet 21.11.2024 09:47:25

The Login/Signup Popup ( Inline Form + Woocommerce ) plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'import_settings' function in versions 2.7.1 to 2.7.2. This makes it possible for au...

4.6

CVE-2020-36715

Exploit

EPSS 0.06%
Veröffentlicht 07.06.2023 02:15:11
Zuletzt bearbeitet 21.11.2024 05:30:08

The Login/Signup Popup plugin for WordPress is vulnerable to authorization bypass due to missing capability checks on several functions in versions up to, and including, 1.4. This makes it possible for authenticated attackers to inject arbitrary web ...

8.8

CVE-2022-0215