Where
-Infinity
0

Trending

Last week
Last month
Last year

Vendor Risk Score

See how wpwax compares to other vendors in security performance

View Risk Score →

wpWax DirectoristWordPress Directorist plugin <= 8.5.10 - Broken Access Control vulnerability

Risk 27
Severity
5.3
First published (updated )
CVE-2026-39509

wpWax FormGentWordPress FormGent plugin <= 1.7.0 - Arbitrary File Deletion vulnerability

Risk 49
Severity
8.6
First published (updated )
CVE-2026-22460

wpWax DirectoristWordPress Directorist plugin <= 8.6.6 - Open Redirection vulnerability

Risk 24
Severity
4.7
First published (updated )
CVE-2025-64250

wpWax Legal PagesWordPress Legal Pages plugin <= 1.4.6 - Broken Access Control vulnerability

Risk 27
Severity
5.3
First published (updated )
CVE-2025-66077

wpWax Legal PagesWordPress Legal Pages plugin <= 1.4.5 - Broken Access Control Vulnerability

Risk 27
Severity
6.5
EPSS
0.03%
First published (updated )
CVE-2025-48242
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

wpWax HelpGentWordPress HelpGent plugin <= 2.2.5 - PHP Object Injection vulnerability

Risk 61
Severity
9.8
EPSS
0.05%
First published (updated )
CVE-2025-32658

wpWax Logo Showcase UltimateWordPress Logo Showcase Ultimate plugin <= 1.4.4 - Local File Inclusion vulnerability

Risk 27
Severity
6.5
EPSS
0.05%
First published (updated )
CVE-2025-32499

wpWax Directorist AddonsKit for ElementorWordPress Directorist AddonsKit for Elementor plugin <= 1.1.6 - Cross Site Scripting (XSS) vulnerability

Risk 26
Severity
6.5
EPSS
0.03%
First published (updated )
CVE-2025-31857

wpWax Directorist WordpressDirectorist: AI-Powered Business Directory Plugin with Classified Ads Listings <= 8.1 - Privilege Escalation and Account Takeover via Weak OTP

Risk 86
Severity
9.8
First published (updated )
CVE-2025-1570

wpWax Directorist WordpressDirectorist – AI-Powered WordPress Business Directory Plugin with Classified Ads Listings <= 8.0.12 - Unauthenticated User Information Exposure

Risk 27
Severity
5.3
First published (updated )
CVE-2024-12041
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

wpWax Post Grid\, Slider \& Carousel Ultimate WordpressWordPress Post Grid, Slider & Carousel Ultimate – with Shortcode, Gutenberg Block & Elementor Widget plugin <= 1.6.10 - Local File Inclusion vulnerability

Risk 56
Severity
8.8
EPSS
0.04%
First published (updated )
CVE-2025-24782

Post Grid Slider & Carousel UltimatePost Grid, Slider & Carousel Ultimate – with Shortcode, Gutenberg Block & Elementor Widget <= 1.6.10 - Authenticated (Contributor+) Local File Inclusion via post_type_ajax_handler()

Risk 79
Severity
8.8
First published (updated )
CVE-2024-13409

wpWax DirectoristWordPress Directorist plugin <= 7.5.4 - Arbitrary Content Deletion vulnerability

Risk 22
Severity
4.3
First published (updated )
CVE-2023-35052

wpWax Product Carousel Slider & Grid Ultimate for WooCommerce (woo-product-carousel-slider-and-grid-ultimate)WordPress Product Carousel Slider & Grid Ultimate for WooCommerce plugin <= 1.9.10 - Authenticated Local File Inclusion vulnerability

Risk 31
Severity
6.5
First published (updated )
CVE-2024-44048

wpWax DirectoristWordPress Directorist plugin <= 7.8.6 - Broken Access Control vulnerability

Risk 19
Severity
5.3
EPSS
0.04%
First published (updated )
CVE-2024-33929
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

wpWax Post Grid\, Slider \& Carousel Ultimate WordpressWordPress Post Grid, Slider & Carousel Ultimate plugin <= 1.6.6 - Cross Site Scripting (XSS) vulnerability

Risk 34
Severity
6.5
EPSS
0.04%
First published (updated )
CVE-2024-29925

wpWax Legal Pages WordpressWordPress Legal Pages plugin <= 1.3.7 - CSRF + Broken Access Control vulnerability

Risk 71
Severity
8
First published (updated )
CVE-2023-50886

WordPress Product Carousel Slider & Grid Ultimate for WooCommerceProduct Carousel Slider & Grid Ultimate for WooCommerce <= 1.9.7 - Authenticated(Contributor+) PHP Object Injection

Risk 79
Severity
8.8
First published (updated )
CVE-2024-1950

Post Grid Slider & Carousel UltimatePost Grid, Slider & Carousel Ultimate – with Shortcode, Gutenberg Block & Elementor Widget <= 1.6.7 - Authenticated (Contributor+) PHP Object Injection in outpost_shortcode_metabox_markup

Risk 79
Severity
8.8
First published (updated )
CVE-2024-2006

Directorist WordPress Business Directory Plugin with Classified Ads ListingsDirectorist <= 7.8.4 - Missing Authorization to Unauthenticated Settings Change

Risk 27
Severity
5.3
First published (updated )
CVE-2024-1322
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

wpWax Directorist WordpressDirectorist < 7.5.4 - Admin+ LFI

Risk 16
Severity
2.7
First published (updated )
CVE-2023-2252

wpWax Legal Pages WordpressWordPress Legal Pages Plugin <= 1.3.8 is vulnerable to Cross Site Request Forgery (CSRF)

Risk 77
Severity
8.8
First published (updated )
CVE-2023-47824

wpWax Directorist WordpressWordPress Directorist plugin <= 7.7.1 - CSV Injection

Risk 79
Severity
8.8
First published (updated )
CVE-2023-41798

wpWax Directorist WordpressDirectorist <= 7.5.4 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary Post Deletion in listing_task

Risk 39
Severity
6.5
First published (updated )
CVE-2023-1889

wpWax Directorist WordpressDirectorist <= 7.5.4 - Authenticated (Subscriber+) Arbitrary User Password Reset to Privilege Escalation

Risk 79
Severity
8.8
First published (updated )
CVE-2023-1888
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

wpWax Directorist WordpressDirectorist < 7.4.4 - Subscriber+ Sensitive Information Disclosure

Risk 38
Severity
6.5
First published (updated )
CVE-2022-3961

wpWax Directorist WordpressDirectorist < 7.4.2.2 - Subscriber+ Arbitrary User Password Update via IDOR

Risk 38
Severity
6.5
First published (updated )
CVE-2022-3930

wpWax Directorist WordpressDirectorist < 7.3.1 - Unauthenticated Email Address Disclosure

Risk 27
Severity
5.3
First published (updated )
CVE-2022-2376

wpWax Directorist WordpressDirectorist < 7.3.0 - Subscriber+ Arbitrary E-mail Sending

Risk 22
Severity
4.3
First published (updated )
CVE-2022-2377

wpWax Directorist WordpressDirectorist - Business Directory Plugin < 7.2.3 - Admin+ Arbitrary File Upload

Risk 30
Severity
4.9
First published (updated )
CVE-2022-2046
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203