Wpwax vulnerabilities, page 3

52 vulnerabilities

Known vulnerabilities in Wpwax products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 19 products.

5.3MediumCVE-2026-39509wordpress · directorist +1 moreWordPress Directorist plugin <= 8.5.10 - Broken Access Control vulnerabilityMissing Authorization vulnerability in wpWax Directorist directorist allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Directorist: from n/a through <= 8.5.10.EPSS0.29%7.1HighCVE-2026-94499wordpress · formgent +1 moreWordPress FormGent plugin <= 1.12.2 - Broken Access Control vulnerabilitySubscriber Broken Access Control in FormGent <= 1.12.2 versions.EPSS0.28%9.1CriticalCVE-2026-22460wordpress · formgent +1 moreWordPress FormGent plugin <= 1.7.0 - Arbitrary File Deletion vulnerabilityImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in wpWax FormGent formgent allows Path Traversal.This issue affects FormGent: from n/a through <= 1.7.0.EPSS0.41%8.5HighCVE-2026-49073wordpress · directorist-booking +1 moreWordPress Directorist Booking plugin <= 3.0.3 - SQL Injection vulnerabilityImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in wpWax Directorist Booking allows Blind SQL Injection. This issue affects Directorist Booking: from n/a through 3.0.3.EPSS0.36%9.9CriticalCVE-2026-32474wordpress · templatiq +1 moreWordPress Templatiq plugin <= 0.2.5 - Arbitrary File Upload vulnerabilityContributor Arbitrary File Upload in Templatiq <= 0.2.5 versions.EPSS0.48%9.1CriticalCVE-2026-3141wordpress · formgent +1 moreFormGent <= 1.9.2- Missing Authorization to Unauthenticated Arbitrary File Deletion via 'file_token' ParameterThe FormGent plugin for WordPress is vulnerable to unauthorized arbitrary file deletion due to a missing capability check on the /wp-json/formgent/responses/attachments REST API endpoint in all versions up to, and including, 1.9.2 This is due to the REST API route being registered without any authentication middleware in routes/rest/api.php. This makes it possible for unauthenticated attackers to delete arbitrary files within the formgent uploads directory. Additionally, on Linux servers where the wp-content/uploads/formgent directory does not yet exist (the default state after plugin installation), the path traversal protection can be bypassed, enabling deletion of arbitrary files including wp-config.php which can lead to complete site takeover via a fresh WordPress installation.EPSS0.90%7.2HighCVE-2023-2252unknown · directorist +2 moreDirectorist < 7.5.4 - Admin+ LFIThe Directorist WordPress plugin before 7.5.4 is vulnerable to Local File Inclusion as it does not validate the file parameter when importing CSV files.EPSS1.34%6.5MediumCVE-2023-1889wordpress · directorist +2 moreDirectorist <= 7.5.4 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary Post Deletion in listing_taskThe Directorist plugin for WordPress is vulnerable to an Insecure Direct Object Reference in versions up to, and including, 7.5.4. This is due to improper validation and authorization checks within the listing_task function. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to delete arbitrary posts. Please note CVE-2023-35052 appears to be a duplicate of this issue.EPSS0.61%8.8HighCVE-2023-1888wordpress · directorist +2 moreDirectorist <= 7.5.4 - Authenticated (Subscriber+) Arbitrary User Password Reset to Privilege EscalationThe Directorist plugin for WordPress is vulnerable to an arbitrary user password reset in versions up to, and including, 7.5.4. This is due to a lack of validation checks within login.php. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to reset the password of an arbitrary user and gain elevated (e.g., administrator) privileges.EPSS0.98%8.8HighCVE-2023-41798wordpress · directorist +2 moreWordPress Directorist Plugin <= 7.7.1 is vulnerable to CSV InjectionImproper Neutralization of Formula Elements in a CSV File vulnerability in wpWax Directorist – WordPress Business Directory Plugin with Classified Ads Listing.This issue affects Directorist – WordPress Business Directory Plugin with Classified Ads Listings: from n/a through 7.7.1.EPSS0.59%8.8HighCVE-2023-47824wordpress · legal-pages +2 moreWordPress Legal Pages Plugin <= 1.3.8 is vulnerable to Cross Site Request Forgery (CSRF)Cross-Site Request Forgery (CSRF) vulnerability in wpWax Legal Pages – Privacy Policy, Terms & Conditions, GDPR, CCPA, and Cookie Notice Generator plugin <= 1.3.8 versions.EPSS0.25%8HighCVE-2023-50886wordpress · legal-pages +1 moreWordPress Legal Pages plugin <= 1.3.7 - CSRF + Broken Access Control vulnerabilityCross-Site Request Forgery (CSRF), Incorrect Authorization vulnerability in wpWax Legal Pages.This issue affects Legal Pages: from n/a through 1.3.7.EPSS0.21%