wpWax vulnerabilities

CVEs per yearBy the year they were published

1. 20222
2. 20234
3. 202411
4. 202516
5. 202611

Newest CVEs

• CVE-2026-100185

  Directorist: AI-Powered Business Directory, Listings & Classified Ads <= 8.10.2.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'phone' Listing Field

  wpwax · Directorist: AI-Powered Business Directory, Listings & Classified Ads

  Medium6.4
• CVE-2026-17092

  Directorist: AI-Powered Business Directory, Listings & Classified Ads <= 8.10.2.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Listing Deletion via 'listing_id' Parameter

  wpwax · Directorist: AI-Powered Business Directory, Listings & Classified Ads

  High8.1
• CVE-2026-94499

  WordPress FormGent plugin <= 1.12.2 - Broken Access Control vulnerability

  wpWax · FormGent

  High7.1
• CVE-2026-32474

  WordPress Templatiq plugin <= 0.2.5 - Arbitrary File Upload vulnerability

  wpWax · Templatiq

  Critical9.9
• CVE-2025-15028

  FormGent – Next-Gen AI Form Builder for WordPress with Multi-Step, Quizzes, Payments & More <= 1.9.2 - Unauthenticated Stored Cross-Site Scripting

  wpwax · FormGent – Next-Gen AI Form Builder for WordPress with Multi-Step, Quizzes, Payments & More

  High7.2
• CVE-2026-3141

  FormGent <= 1.9.2- Missing Authorization to Unauthenticated Arbitrary File Deletion via 'file_token' Parameter

  wpwax · FormGent – Next-Gen AI Form Builder for WordPress with Multi-Step, Quizzes, Payments & More

  Critical9.1
• CVE-2026-59518

  WordPress Directorist plugin <= 8.8.2 - PHP Object Injection vulnerability

  wpWax · Directorist

  Critical9.8
• CVE-2026-49073

  WordPress Directorist Booking plugin <= 3.0.3 - SQL Injection vulnerability

  wpWax · Directorist Booking

  High8.5
• CVE-2026-39509

  WordPress Directorist plugin <= 8.5.10 - Broken Access Control vulnerability

  wpWax · Directorist

  Medium5.3
• CVE-2026-22460

  WordPress FormGent plugin <= 1.7.0 - Arbitrary File Deletion vulnerability

  wpWax · FormGent

  High8.6