Login & Register Customizer – Popup | Slider | Inline | WooCommerce vulnerabilities

Product

by xootix · last CVE Feb 20, 2025

CVEs

On KEV

8.8

Max CVSS

New 30D

Severity mix

Critical 0High 1Medium 1Low 0

Severity

Exploitation

Watch

Add Login & Register Customizer – Popup | Slider | Inline | WooCommerce to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2024-5324	8.8	2%	Jun 6	XootiX Framework <= Various Plugin Versions - Missing Authorization to Arbitrary Options Update Affected: 2.7.1 through 2.7.2
CVE-2025-1064	5.4	0%	Feb 20	Login/Signup Popup ( Inline Form + Woocommerce ) <= 2.8.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via xoo_el_action Shortcode Affected: through 2.8.5