Login Request a demo
LP
Product
Login/signup Popup
by Xootix · last CVE Feb 20, 2025
5
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities5In the news0Timeline
Severity mix
Critical 0High 2Medium 3Low 0
Severity
All severities5Critical0High2Medium3Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Login/signup Popup to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-5324
8.8
2%
Jun 6
Multiple plugins for WordPress utilizing the XootiX Framework are vulnerable to unauthorized modification of data due to a missing capability check on the 'import_settings'…
Affected: 2.7.1; 2.7.2
CVE-2022-0215
8.8
1%
Jan 18
The Login/Signup Popup, Waitlist Woocommerce ( Back in stock notifier ), and Side Cart Woocommerce (Ajax) WordPress plugins by XootiX are vulnerable to Cross-Site Request Forgery…
Affected: through 2.2
CVE-2025-1064
5.4
0%
Feb 20
The Login/Signup Popup ( Inline Form + Woocommerce ) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's xoo_el_action shortcode in all versions up…
Affected: before 2.8.6
CVE-2020-36715
4.6
1%
Jun 7
The Login/Signup Popup plugin for WordPress is vulnerable to authorization bypass due to missing capability checks on several functions in versions up to, and including, 1.4
Affected: through 1.4
CVE-2024-5665
4.3
0%
Jun 6
The Login/Signup Popup ( Inline Form + Woocommerce ) plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the ‘export_settings’…
Affected: 2.7.1 before 2.7.3
Showing 5