azexo records

5 published records for vendor azexo.

Researcher profile

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

5 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
39Monitor	CVE-2024-50480No exploit	WordPress Marketing Automation by AZEXO plugin <= 1.27.80 - Arbitrary File Upload vulnerabilityazexo · marketing automation by azexo · CWE-434 File upload	Critical9.9	—	0.4%	Oct 29, 2024
35Monitor	CVE-2023-3052No exploit	Page Builder by AZEXO <= 1.27.133 - Cross-Site Request Forgery to Post Creation/Modification/Deletionazexo · page builder with image map by azexo · CWE-352 Pre-auth CSRF	High8.8	—	0.3%	Jun 2, 2023
21Monitor	CVE-2023-3051No exploit	Page Builder by AZEXO <= 1.27.133 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodeazexo · page builder with image map by azexo · CWE-79 XSS	Medium5.4	—	0.4%	Jun 2, 2023
17Monitor	CVE-2023-3053No exploit	Page Builder by AZEXO <= 1.27.133 - Missing Authorization to Post Creationazexo · page builder with image map by azexo · CWE-862 Broken access control (IDOR)	Medium4.3	—	0.5%	Jun 2, 2023
17Monitor	CVE-2023-3055No exploit	Page Builder by AZEXO <= 1.27.133 - Cross-Site Request Forgery to Stored Cross-Site Scripting via azh_saveazexo · page builder with image map by azexo · CWE-352 Pre-auth XSS CSRF	Medium4.3	—	0.2%	Jun 3, 2023

CVE-2024-50480
39Monitor
WordPress Marketing Automation by AZEXO plugin <= 1.27.80 - Arbitrary File Upload vulnerability
CriticalCVSS 9.9No exploitEPSS 0%
- File upload
azexo · marketing automation by azexoOct 29, 2024
CVE-2023-3052
35Monitor
Page Builder by AZEXO <= 1.27.133 - Cross-Site Request Forgery to Post Creation/Modification/Deletion
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- CSRF
azexo · page builder with image map by azexoJun 2, 2023
CVE-2023-3051
21Monitor
Page Builder by AZEXO <= 1.27.133 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
MediumCVSS 5.4No exploitEPSS 0%
- XSS
azexo · page builder with image map by azexoJun 2, 2023
CVE-2023-3053
17Monitor
Page Builder by AZEXO <= 1.27.133 - Missing Authorization to Post Creation
MediumCVSS 4.3No exploitEPSS 0%
- Broken access control (IDOR)
azexo · page builder with image map by azexoJun 2, 2023
CVE-2023-3055
17Monitor
Page Builder by AZEXO <= 1.27.133 - Cross-Site Request Forgery to Stored Cross-Site Scripting via azh_save
MediumCVSS 4.3No exploitEPSS 0%
azexo · page builder with image map by azexoJun 3, 2023