wpxpo vulnerabilities

CVEs per yearBy the year they were published

1. 20231
2. 20249
3. 20258
4. 202618

Newest CVEs

• CVE-2026-8145

  WholesaleX <= 3.0.8 - Unauthenticated Limited Privilege Escalation via 'process_registration'

  wpxpo · WholesaleX – All-in-One B2B Solution with Wholesale Pricing

  Medium5.4
• CVE-2026-96840

  Post Grid Gutenberg Blocks <= 5.1.0 - Unauthenticated Stored Cross-Site Scripting via display_name User Field

  wpxpo · Post Grid Gutenberg Blocks – PostX

  High7.2
• CVE-2026-5158

  PostX <= 5.0.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Comments Block

  wpxpo · Post Grid Gutenberg Blocks – PostX

  Medium6.4
• CVE-2026-17161

  WowStore <= 4.4.24 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'filterMobileText' Block Attribute

  wpxpo · WowStore – Store Builder & Product Blocks for WooCommerce

  Medium6.4
• CVE-2026-17162

  WowStore <= 4.4.24 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'currentPostId' Block Attribute

  wpxpo · WowStore – Store Builder & Product Blocks for WooCommerce

  Medium6.4
• CVE-2026-15100

  Post Grid Gutenberg Blocks <= 5.0.32 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'searchnoresult' Block Attribute

  wpxpo · Post Grid Gutenberg Blocks – PostX

  Medium6.4
• CVE-2026-57377

  WordPress WowAddons plugin <= 1.6.8 - Broken Access Control vulnerability

  WPXPO · WowAddons

  Medium6.5
• CVE-2026-13253

  Post Grid Gutenberg Blocks for News, Magazines, Blog Websites <= 5.0.31 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'moreResultsText' Block Attribute

  wpxpo · Post Grid Gutenberg Blocks – PostX

  Medium6.4
• CVE-2026-57686

  WordPress WowAddons plugin <= 1.6.14 - Cross Site Scripting (XSS) vulnerability

  WPXPO · WowAddons

  High7.1
• CVE-2026-2518

  FastX <= 1.0.2 - Missing Authorization to Authenticated (Subscriber+) Limited Plugin Installation and Activation

  wpxpo · FastX

  Medium4.3