PX-lab vulnerabilities

CVEs per yearBy the year they were published

1. 20253
2. 20261

Newest CVEs

• CVE-2026-94503

  WordPress Zombify plugin <= 1.7.7 - Arbitrary File Upload vulnerability

  PX-lab · Zombify

  Critical10.0
• CVE-2025-8385

  Zombify <= 1.7.5 - Authenticated (Subscriber+) Path Traversal to Arbitrary File Read

  PX-lab · Zombify

  Medium6.8
• CVE-2024-12295

  BoomBox Theme Extensions <= 1.8.0 - Authenticated (Subscriber+) Privilege Escalation via Password Reset/Account Takeover in boombox_ajax_reset_password

  PX-lab · BoomBox Theme Extensions

  High8.8
• CVE-2024-12859

  BoomBox Theme Extensions <= 1.8.0 - Authenticated (Contributor+) Local File Inclusion via Shortcode

  PX-lab · BoomBox Theme Extensions

  High8.8