Most severe vulnerabilities for vendor "roxnor"

Where

Sort:

Software

roxnor wp ultimate review

roxnor elementskit lite (elementskit-lite)

roxnor fundengine

roxnor fundengine wp-fundraising-donation

roxnor metform elementor contact form builder

roxnor popupkit

roxnor popupkit popup-builder-block

roxnor wordpress emailkit plugin

Roxnor FundEngineWordPress FundEngine Plugin <= 1.7.4 - Local File Inclusion Vulnerability

Risk 70

Severity

7.5

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Roxnor FundEngine allows PHP Local File Inclusion. This issue affects FundEngine: from n/a through 1.7.4.

1 / 2

Source: NVD

Remedy

Update the WordPress FundEngine plugin to the latest available version (at least 1.7.5).

First published (updated )

CVE-2025-48302

Roxnor Wp Ultimate ReviewWordPress Wp Ultimate Review plugin <= 2.3.7 - Cross Site Scripting (XSS) vulnerability

Risk 46

Severity

6.5

XSS

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Roxnor Wp Ultimate Review wp-ultimate-review allows DOM-Based XSS.This issue affects Wp Ultimate Review: from n/a through <= 2.3.7.

First published (updated )

CVE-2025-63057

Roxnor ElementsKit Lite (elementskit-lite)WordPress ElementsKit Lite plugin <= 3.1.4 - Unauthenticated Broken Access Control vulnerability

Risk 27

Severity

5.3

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Missing Authorization vulnerability in Roxnor ElementsKit Elementor addons Lite elementskit-lite.This issue affects ElementsKit Elementor addons Lite: from n/a through <= 3.1.4.

Remedy

Update to 3.2.0 or a higher version.

First published (updated )

CVE-2024-37255

Roxnor Wp Ultimate ReviewWordPress Wp Ultimate Review plugin <= 2.3.8 - Broken Access Control vulnerability

Risk 27

Severity

5.3

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Missing Authorization vulnerability in Roxnor Wp Ultimate Review wp-ultimate-review allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Wp Ultimate Review: from n/a through <= 2.3.8.

First published (updated )

CVE-2026-39644

Roxnor WordPress EmailKit PluginWordPress EmailKit Plugin <= 1.6.0 - Arbitrary Content Deletion Vulnerability

Risk 30

Severity

4.9

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Missing Authorization vulnerability in Roxnor EmailKit allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects EmailKit: from n/a through 1.6.0.

1 / 2

Source: NVD

First published (updated )

CVE-2025-60106

Roxnor Metform Elementor Contact Form BuilderWordPress Metform Elementor Contact Form Builder plugin <= 3.9.7 - Server Side Request Forgery (SSRF) vulnerability

Risk 18

Severity

4.4

EPSS

0.03%

SSRF

AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N

Server-Side Request Forgery (SSRF) vulnerability in Roxnor Metform metform allows Server Side Request Forgery.This issue affects Metform: from n/a through <= 3.9.2.

Remedy

Update the WordPress Metform Elementor Contact Form Builder plugin to the latest available version (at least 3.9.3).

First published (updated )

CVE-2025-30914

Roxnor FundEngine wp-fundraising-donationWordPress WP Fundraising Donation and Crowdfunding Platform plugin <= 1.7.3 - Cross Site Request Forgery (CSRF) Vulnerability

Risk 16

Severity

4.3

EPSS

0.02%

CSRF

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Cross-Site Request Forgery (CSRF) vulnerability in Roxnor FundEngine wp-fundraising-donation allows Cross Site Request Forgery.This issue affects FundEngine: from n/a through <= 1.7.3.

1 / 2

Source: MITRE

Remedy

Update the WordPress WP Fundraising Donation and Crowdfunding Platform plugin to the latest available version (at least 1.7.4).

First published (updated )

CVE-2025-47459

Roxnor PopupKit popup-builder-blockWordPress PopupKit plugin <= 2.2.4 - Sensitive Data Exposure vulnerability

Risk 22

Severity

4.3

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Roxnor PopupKit popup-builder-block allows Retrieve Embedded Sensitive Data.This issue affects PopupKit: from n/a through <= 2.2.4.

First published (updated )

CVE-2025-69026

Trending

Vendor Risk Score

Software

Roxnor FundEngineWordPress FundEngine Plugin <= 1.7.4 - Local File Inclusion Vulnerability

Remedy

Roxnor Wp Ultimate ReviewWordPress Wp Ultimate Review plugin <= 2.3.7 - Cross Site Scripting (XSS) vulnerability

Roxnor ElementsKit Lite (elementskit-lite)WordPress ElementsKit Lite plugin <= 3.1.4 - Unauthenticated Broken Access Control vulnerability

Remedy

Roxnor Wp Ultimate ReviewWordPress Wp Ultimate Review plugin <= 2.3.8 - Broken Access Control vulnerability

Roxnor WordPress EmailKit PluginWordPress EmailKit Plugin <= 1.6.0 - Arbitrary Content Deletion Vulnerability

Roxnor Metform Elementor Contact Form BuilderWordPress Metform Elementor Contact Form Builder plugin <= 3.9.7 - Server Side Request Forgery (SSRF) vulnerability

Remedy

Roxnor FundEngine wp-fundraising-donationWordPress WP Fundraising Donation and Crowdfunding Platform plugin <= 1.7.3 - Cross Site Request Forgery (CSRF) Vulnerability

Remedy

Roxnor PopupKit popup-builder-blockWordPress PopupKit plugin <= 2.2.4 - Sensitive Data Exposure vulnerability

Company

Resources

Contact