Skip to content
Noroxi

xootix records

9 published records for vendor xootix.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
33.3%
Median publish → KEV
No record has entered KEV

Records by year

  1. 22
  2. 23
  3. 24
  4. 25

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

9 records
  • CVE-2024-5324
    35Monitor

    XootiX Framework <= Various Plugin Versions - Missing Authorization to Arbitrary Options Update

    HighCVSS 8.8Proof of conceptEPSS 2%

    xootix · login\/signup popupJun 5, 2024

  • CVE-2022-0215
    35Monitor

    XootiX Plugins <= Various Versions Cross-Site Request Forgery to Arbitrary Options Update

    HighCVSS 8.8No exploitEPSS 1%

    xootix · login\/signup popupJan 18, 2022

  • CVE-2022-45376
    35Monitor

    WordPress Side Cart Woocommerce (Ajax) Plugin < 2.1 is vulnerable to Cross Site Request Forgery (CSRF)

    HighCVSS 8.8No exploitEPSS 0%

    xootix · side cart woocommerceMay 22, 2023

  • CVE-2023-2706
    33Monitor

    OTP Login Woocommerce & Gravity Forms <= 2.2 - Authentication Bypass to Privilege Escalation

    HighCVSS 8.1No exploitEPSS 2%

    xootix · otp login woocommerce \& gravity formsMay 16, 2023

  • CVE-2024-8724
    24Monitor

    Waitlist Woocommerce ( Back in stock notifier ) <= 2.7.5 - Reflected Cross-Site Scripting

    MediumCVSS 6.1No exploitEPSS 0%

    xootix · waitlist woocommerceSep 14, 2024

  • CVE-2025-1064
    21Monitor

    Login/Signup Popup ( Inline Form + Woocommerce ) <= 2.8.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via xoo_el_action Shortcode

    MediumCVSS 5.4No exploitEPSS 0%

    xootix · login\/signup popupFeb 20, 2025

  • CVE-2023-28415
    19Monitor

    WordPress Side Cart Woocommerce (Ajax) Plugin <= 2.2 is vulnerable to Cross Site Scripting (XSS)

    MediumCVSS 4.8No exploitEPSS 1%

    xootix · side cart woocommerceAug 30, 2023

  • CVE-2020-36715
    18Monitor

    Login/Signup Popup < 1.5 - Missing Authorization

    MediumCVSS 4.6No exploitEPSS 1%

    xootix · login\/signup popupJun 6, 2023

  • CVE-2024-5665
    17Monitor

    Login/Signup Popup ( Inline Form + Woocommerce ) 2.7.1 - 2.7.2 - Missing Authorization to Arbitrary Options Exposure

    MediumCVSS 4.3No exploitEPSS 0%

    xootix · login\/signup popupJun 6, 2024