xootix

Records15All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high5CVSS 7.0–8.9

Exploited now

xootix records in CISA KEV

No xootix vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Login/signup Popup 5 records MEDIUM Side Cart Woocommerce 4 records MEDIUM Waitlist Woocommerce 3 records MEDIUM Otp Login Woocommerce & Gravity Forms 2 records MEDIUM

Records

2 records in Otp Login Woocommerce & Gravity Forms · all components

TI-2024-04943 CVE-2024-5324 · GHSA-764x-99q3-75x3

XootiX Framework <= Various Plugin Versions - Missing Authorization to Arbitrary Options Update

MEDIUM 43

Multiple plugins for WordPress utilizing the XootiX Framework are vulnerable to unauthorized modification of data due to a missing capability check on the 'import_settings' function in various versions.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01507 Published 2024-06-06 No fix listed CWE-862

TI-2023-02534 CVE-2023-2706 · GHSA-gvw7-839w-8f56

OTP Login Woocommerce & Gravity Forms <= 2.2 - Authentication Bypass to Privilege Escalation

MEDIUM 41

The OTP Login Woocommerce & Gravity Forms plugin for WordPress is vulnerable to authentication bypass.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.0172 Published 2023-05-17 No fix listed CWE-287

Open these records in search →

Critical	0
High	5
Medium	10
Low	0
No CVSS	0