Vulnerabilities (CVE)

Filtered by vendor Wpwax Subscribe
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-47824 1 Wpwax 1 Legal Pages 2023-11-29 N/A 8.8 HIGH
Cross-Site Request Forgery (CSRF) vulnerability in wpWax Legal Pages – Privacy Policy, Terms & Conditions, GDPR, CCPA, and Cookie Notice Generator plugin <= 1.3.8 versions.
CVE-2023-41798 1 Wpwax 1 Directorist 2023-11-14 N/A 8.8 HIGH
Improper Neutralization of Formula Elements in a CSV File vulnerability in wpWax Directorist – WordPress Business Directory Plugin with Classified Ads Listing.This issue affects Directorist – WordPress Business Directory Plugin with Classified Ads Listings: from n/a through 7.7.1.
CVE-2021-24981 1 Wpwax 1 Directorist 2021-12-27 5.1 MEDIUM 7.5 HIGH
The Directorist WordPress plugin before 7.0.6.2 was vulnerable to Cross-Site Request Forgery to Remote File Upload leading to arbitrary PHP shell uploads in the wp-content/plugins directory.