Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

xootix vulnerabilities

15 published CVEs name xootix among the affected products.

Published CVEs
15
Last 12 months
4
Critical
0
Known exploited
0

Critical 0High 4Medium 11Low 0Not scored 0

CVEs per yearBy the year they were published

  1. 20221
  2. 20234
  3. 20244
  4. 20252
  5. 20264

Newest CVEs

  • CVE-2026-77188

    Waitlist Woocommerce ( Back in stock notifier ) <= 2.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'type' Shortcode Attribute

    xootix · Waitlist Woocommerce ( Back in stock notifier )

    Medium6.4
  • CVE-2026-114701

    WordPress Waitlist Woocommerce ( Back in stock notifier ) plugin <= 2.9.1 - Cross Site Scripting (XSS) vulnerability

    xootix · Waitlist Woocommerce ( Back in stock notifier )

    Medium6.5
  • CVE-2026-12402

    OTP Login & Register Woocommerce <= 2.7.3 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'fb-config' Setting

    xootix · OTP Login & Register Woocommerce

    Medium4.4
  • CVE-2026-12215

    OTP Login & Register Woocommerce <= 2.7.2 - Unauthenticated Authentication Bypass via Brute Force

    xootix · OTP Login & Register Woocommerce

    Medium5.3
  • CVE-2025-50027

    WordPress Login/Signup Popup plugin <= 2.9.4 - Cross Site Scripting (XSS) Vulnerability

    xootix · Login/Signup Popup

    Medium5.9
  • CVE-2025-1064

    Login/Signup Popup ( Inline Form + Woocommerce ) <= 2.8.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via xoo_el_action Shortcode

    xootix · Login & Register Customizer – Popup | Slider | Inline | WooCommerce

    Medium6.4
  • CVE-2024-43134

    WordPress Waitlist Woocommerce plugin <= 2.6 - Broken Access Control vulnerability

    xootix · Waitlist Woocommerce ( Back in stock notifier )

    Medium4.3
  • CVE-2024-8724

    Waitlist Woocommerce ( Back in stock notifier ) <= 2.7.5 - Reflected Cross-Site Scripting

    xootix · Waitlist Woocommerce ( Back in stock notifier )

    Medium6.1
  • CVE-2024-5665

    Login/Signup Popup ( Inline Form + Woocommerce ) 2.7.1 - 2.7.2 - Missing Authorization to Arbitrary Options Exposure

    xootix · Login/Signup Popup ( Inline Form + Woocommerce )

    Medium4.3
  • CVE-2024-5324

    XootiX Framework <= Various Plugin Versions - Missing Authorization to Arbitrary Options Update

    xootix · Waitlist Woocommerce ( Back in stock notifier )

    High8.8