Roxnor vulnerabilities

CVEs per yearBy the year they were published

1. 20221
2. 202315
3. 202424
4. 202520
5. 202634

Newest CVEs

• CVE-2026-103898

  Wp Social Login and Register Social Counter <= 3.2.2 - Unauthenticated Authentication Bypass via Insufficient Email Verification in Social Login Callback

  roxnor · Wp Social Login and Register Social Counter

  High8.1
• CVE-2026-104012

  Rox Appointment Booking <= 1.3.1 - Unauthenticated Privilege Escalation via Mass Assignment to Mass Assignment via '/public/booking' Endpoint

  roxnor · Rox Appointment Booking – Event, Calendar & Appointment Scheduling

  High8.8
• CVE-2026-100157

  WP Ultimate Review <= 2.4.3 - Unauthenticated Arbitrary Shortcode Execution via 'xs_reviw_summery' Parameter (Split-Shortcode / Late-Registered Shortcode)

  roxnor · WP Ultimate Review

  Medium6.5
• CVE-2026-103519

  WP Ultimate Review <= 2.4.3 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via 'xs_reviw_summery' Parameter

  roxnor · WP Ultimate Review

  Medium5.4
• CVE-2026-97344

  Wp Social Login and Register Social Counter <= 3.2.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Avatar Alt Attribute via Arbitrary User Meta Write

  roxnor · Wp Social Login and Register Social Counter

  Medium6.4
• CVE-2026-94500

  WordPress ElementsKit Elementor addons Lite plugin <= 4.0.5 - Cross Site Scripting (XSS) vulnerability

  Roxnor · ElementsKit Elementor addons Lite

  Medium6.5
• CVE-2026-92235

  WP Ultimate Review <= 2.4.2 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via 'xs_submit_review_data[xs_reviw_summery]' Parameter

  roxnor · WP Ultimate Review

  High8.1
• CVE-2026-85575

  The ShopEngine Elementor WooCommerce Builder Addon – All in One WooCommerce Solution with eCommerce Templates & Woo Widgets <= 4.9.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'shopengine_product_title_header_size' Parameter

  roxnor · ShopEngine Elementor WooCommerce Builder Addon – All in One WooCommerce Solution with eCommerce Templates & Woo Widgets

  Medium6.4
• CVE-2026-75971

  ShopEngine Elementor WooCommerce Builder Addon <= 4.9.4 - Authenticated (Shop Manager+) Privilege Escalation to WXR Import '<wp_option>' Nodes

  roxnor · ShopEngine Elementor WooCommerce Builder Addon – All in One WooCommerce Solution with eCommerce Templates & Woo Widgets

  High7.2
• CVE-2026-18100

  MetForm <= 4.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'mf_form_id' Widget Setting

  roxnor · MetForm – Contact Form, Survey, Quiz, Conditional Forms, Form Templates & Custom Form Builder for Elementor

  Medium6.4