wpxpo vulnerabilities
36 published CVEs name wpxpo among the affected products.
- 36Published CVEs36 of them scored
- 22Last 12 monthspublished in the last year
- 0Critical15 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-8145
WholesaleX <= 3.0.8 - Unauthenticated Limited Privilege Escalation via 'process_registration'
wpxpo · WholesaleX – All-in-One B2B Solution with Wholesale Pricing
Medium5.4 - CVE-2026-96840
Post Grid Gutenberg Blocks <= 5.1.0 - Unauthenticated Stored Cross-Site Scripting via display_name User Field
wpxpo · Post Grid Gutenberg Blocks – PostX
High7.2 - CVE-2026-5158
PostX <= 5.0.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Comments Block
wpxpo · Post Grid Gutenberg Blocks – PostX
Medium6.4 - CVE-2026-17161
WowStore <= 4.4.24 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'filterMobileText' Block Attribute
wpxpo · WowStore – Store Builder & Product Blocks for WooCommerce
Medium6.4 - CVE-2026-17162
WowStore <= 4.4.24 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'currentPostId' Block Attribute
wpxpo · WowStore – Store Builder & Product Blocks for WooCommerce
Medium6.4 - CVE-2026-15100
Post Grid Gutenberg Blocks <= 5.0.32 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'searchnoresult' Block Attribute
wpxpo · Post Grid Gutenberg Blocks – PostX
Medium6.4 - CVE-2026-57377
WordPress WowAddons plugin <= 1.6.8 - Broken Access Control vulnerability
WPXPO · WowAddons
Medium6.5 - CVE-2026-13253
Post Grid Gutenberg Blocks for News, Magazines, Blog Websites <= 5.0.31 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'moreResultsText' Block Attribute
wpxpo · Post Grid Gutenberg Blocks – PostX
Medium6.4 - CVE-2026-57686
WordPress WowAddons plugin <= 1.6.14 - Cross Site Scripting (XSS) vulnerability
WPXPO · WowAddons
High7.1 - CVE-2026-2518
FastX <= 1.0.2 - Missing Authorization to Authenticated (Subscriber+) Limited Plugin Installation and Activation
wpxpo · FastX
Medium4.3