Login Request a demo
RO
Vendor
roxnor
17 products with CVEs on record
74
CVEs
0
On KEV
3
New 30D
Products
WS
Wp Social Login and Register Social Counter
roxnor
9.8
5 CVEs0 on KEV1 new
WU
Wp Ultimate Review
roxnor
8.1
6 CVEs0 on KEV2 new
EE
ElementsKit Elementor Addons – Advanced Widgets & Templates Addons for Elementor
roxnor
10.0
18 CVEs0 on KEV0 new
FU
FundEngine
Roxnor
9.8
6 CVEs0 on KEV0 new
MC
MetForm – Contact Form, Survey, Quiz, & Custom Form Builder for Elementor
roxnor
9.8
6 CVEs0 on KEV0 new
PB
Popup builder with Gamification, Multi-Step Popups, Page-Level Targeting, and WooCommerce Triggers
roxnor
8.2
5 CVEs0 on KEV0 new
EE
EmailKit – Email Customizer for WooCommerce & WP
roxnor
6.5
4 CVEs0 on KEV0 new
EE
ElementsKit Elementor addons Lite
Roxnor
6.5
3 CVEs0 on KEV0 new
FD
FundEngine – Donation and Crowdfunding Platform
roxnor
8.8
3 CVEs0 on KEV0 new
GE
GetGenie
Roxnor
7.1
3 CVEs0 on KEV0 new
GA
GetGenie – AI Content Writer with Keyword Research & SEO Tracking Tools
roxnor
6.4
3 CVEs0 on KEV0 new
ME
Metform
Roxnor
9.8
3 CVEs0 on KEV0 new
SE
ShopEngine Elementor WooCommerce Builder Addon – All in One WooCommerce Solution
roxnor
4.3
3 CVEs0 on KEV0 new
PO
PopupKit
Roxnor
8.5
2 CVEs0 on KEV0 new
SE
ShopEngine Elementor WooCommerce Builder Addon – All in One WooCommerce Solution with eCommerce Templates & Woo Widgets
roxnor
7.2
2 CVEs0 on KEV0 new
EM
EmailKit
Roxnor
4.9
1 CVEs0 on KEV0 new
MC
MetForm – Contact Form, Survey, Quiz, Conditional Forms, Form Templates & Custom Form Builder for Elementor
roxnor
6.4
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-100157
WU
WP Ultimate Review
roxnor
6.5
0%
Oct 3WP Ultimate Review <= 2.4.3 - Unauthenticated Arbitrary Shortcode Execution via 'xs_reviw_summery' Parameter (Split-Shortcode / Late-Registered Shortcode)
CVE-2026-103519
WU
WP Ultimate Review
roxnor
5.4
0%
Oct 3WP Ultimate Review <= 2.4.3 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via 'xs_reviw_summery' Parameter
CVE-2026-97344
WS
Wp Social Login and Register Social Counter
roxnor
6.4
0%
Oct 3Wp Social Login and Register Social Counter <= 3.2.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Avatar Alt Attribute via Arbitrary User Meta Write
CVE-2026-94500
EE
ElementsKit Elementor addons Lite
Roxnor
6.5
0%
Sep 23WordPress ElementsKit Elementor addons Lite plugin <= 4.0.5 - Cross Site Scripting (XSS) vulnerability
CVE-2026-92235
WU
WP Ultimate Review
roxnor
8.1
0%
Sep 22WP Ultimate Review <= 2.4.2 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via 'xs_submit_review_data[xs_reviw_summery]' Parameter
CVE-2026-85575
SE
ShopEngine Elementor WooCommerce Builder Addon – All in One WooCommerce Solution with eCommerce Templates & Woo Widgets
roxnor
6.4
0%
Sep 15The ShopEngine Elementor WooCommerce Builder Addon – All in One WooCommerce Solution with eCommerce Templates & Woo Widgets <= 4.9.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'shopengine_product_title_header_size' Parameter
CVE-2026-75971
SE
ShopEngine Elementor WooCommerce Builder Addon – All in One WooCommerce Solution with eCommerce Templates & Woo Widgets
roxnor
7.2
1%
Aug 25ShopEngine Elementor WooCommerce Builder Addon <= 4.9.4 - Authenticated (Shop Manager+) Privilege Escalation to WXR Import '<wp_option>' Nodes
CVE-2026-18100
MC
MetForm – Contact Form, Survey, Quiz, Conditional Forms, Form Templates & Custom Form Builder for Elementor
roxnor
6.4
0%
Aug 25MetForm <= 4.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'mf_form_id' Widget Setting
CVE-2026-76063
FD
FundEngine – Donation and Crowdfunding Platform
roxnor
6.4
0%
Aug 25FundEngine <= 1.8.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'wfp_featured_video_url' Parameter
CVE-2026-75930
FD
FundEngine – Donation and Crowdfunding Platform
roxnor
4.3
0%
Aug 25FundEngine <= 1.8.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Modification via 'campaign_post' Parameter
CVE-2026-73993
FU
FundEngine
Roxnor
9.8
1%
Aug 20WordPress FundEngine plugin <= 1.7.9 - PHP Object Injection vulnerability
CVE-2026-32470
FU
FundEngine
Roxnor
9.8
1%
Aug 18WordPress FundEngine plugin <= 1.7.9 - PHP Object Injection vulnerability
CVE-2026-65440
GE
GetGenie
Roxnor
7.1
0%
Jul 27WordPress GetGenie plugin <= 4.4.3 - Cross Site Scripting (XSS) vulnerability
CVE-2026-59560
FU
FundEngine
Roxnor
6.5
0%
Jul 27WordPress FundEngine plugin <= 1.7.8 - Broken Access Control vulnerability
CVE-2026-57406
FU
FundEngine
Roxnor
6.5
0%
Jul 13WordPress FundEngine plugin <= 1.7.6 - Broken Access Control vulnerability
CVE-2026-57316
GE
GetGenie
Roxnor
6.5
0%
Jun 26WordPress GetGenie plugin <= 4.4.2 - Sensitive Data Exposure vulnerability
CVE-2026-4362
EE
ElementsKit Elementor Addons – Advanced Widgets & Templates Addons for Elementor
roxnor
6.5
0%
May 5ElementsKit Elementor Addons <= 3.8.2 - Missing Authorization to Unauthenticated Widget Content Overwrite
CVE-2026-5957
EE
EmailKit – Email Customizer for WooCommerce & WP
roxnor
6.5
1%
May 5EmailKit <= 1.6.5 - Authenticated (Author+) Arbitrary File Read via 'emailkit-editor-template' REST Parameter
CVE-2026-39644
WU
Wp Ultimate Review
Roxnor
5.3
0%
Apr 8WordPress Wp Ultimate Review plugin <= 2.3.8 - Broken Access Control vulnerability
CVE-2026-2600
EE
ElementsKit Elementor Addons – Advanced Widgets & Templates Addons for Elementor
roxnor
6.4
0%
Apr 4ElementsKit Elementor Addons and Templates <= 3.7.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Simple Tab Widget
CVE-2026-3474
EE
EmailKit – Email Customizer for WooCommerce & WP
roxnor
4.9
0%
Mar 20EmailKit <= 1.6.3 - Authenticated (Administrator+) Path Traversal via 'emailkit-editor-template' REST API Parameter
CVE-2026-2879
GA
GetGenie – AI Content Writer with Keyword Research & SEO Tracking Tools
roxnor
5.4
0%
Mar 13GetGenie <= 4.3.2 - Insecure Direct Object Reference to Authenticated (Author+) Arbitrary Post Overwrite/Deletion
CVE-2026-2257
GA
GetGenie – AI Content Writer with Keyword Research & SEO Tracking Tools
roxnor
6.4
0%
Mar 13GetGenie <= 4.3.2 - Insecure Direct Object Reference to Authenticated (Author+) Stored Cross-Site Scripting via REST API
CVE-2026-23693
EE
ElementsKit Elementor Addons – Advanced Widgets & Templates Addons for Elementor
Roxnor
10.0
1%
Feb 23ElementsKit Elementor Addons < 3.7.9 Unauthenticated Mailchimp REST Endpoint
CVE-2026-1925
EE
EmailKit – Email Customizer for WooCommerce & WP
roxnor
4.3
0%
Feb 18EmailKit – Email Customizer for WooCommerce & WP <= 1.6.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Title Modification
CVE-2025-14895
PB
Popup builder with Gamification, Multi-Step Popups, Page-Level Targeting, and WooCommerce Triggers
roxnor
5.4
0%
Feb 10PopupKit <= 2.2.0 - Missing Authorization to Sensitive Information Disclosure and Data Deletion
CVE-2025-13192
PB
Popup builder with Gamification, Multi-Step Popups, Page-Level Targeting, and WooCommerce Triggers
roxnor
8.2
0%
Feb 4Popup builder with Gamification <= 2.2.0 - Unauthenticated SQL Injection via Multiple REST API Endpoints
CVE-2026-0633
MC
MetForm – Contact Form, Survey, Quiz, & Custom Form Builder for Elementor
roxnor
3.7
0%
Jan 24MetForm – Contact Form, Survey, Quiz, & Custom Form Builder for Elementor <= 4.1.0 - Unauthenticated Form Submission Exposure via Forgeable Cookie Value
CVE-2026-24356
GE
GetGenie
Roxnor
4.9
0%
Jan 22WordPress GetGenie plugin <= 4.3.0 - Broken Access Control vulnerability
CVE-2026-1003
GA
GetGenie – AI Content Writer with Keyword Research & SEO Tracking Tools
roxnor
4.3
0%
Jan 16GetGenie – AI Content Writer with Keyword Research & SEO Tracking Tools <= 4.3.0 - Missing Authorization to Authenticated (Author+) Arbitrary Post Deletion
CVE-2025-14059
EE
EmailKit – Email Customizer for WooCommerce & WP
roxnor
6.5
0%
Jan 7EmailKit <= 1.6.1 - Authenticated (Author+) Arbitrary File Read via Path Traversal
CVE-2025-14441
PB
Popup builder with Gamification, Multi-Step Popups, Page-Level Targeting, and WooCommerce Triggers
roxnor
4.3
0%
Jan 6Popupkit <= 2.2.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Subscriber Data Deletion
CVE-2025-69026
PO
PopupKit
Roxnor
4.3
0%
Dec 30WordPress PopupKit plugin <= 2.1.5 - Sensitive Data Exposure vulnerability
CVE-2025-14314
PO
PopupKit
Roxnor
8.5
0%
Dec 18WordPress PopupKit plugin <= 2.1.5 - SQL Injection vulnerability
CVE-2025-63057
WU
Wp Ultimate Review
Roxnor
6.5
0%
Dec 9WordPress Wp Ultimate Review plugin <= 2.3.7 - Cross Site Scripting (XSS) vulnerability
CVE-2025-13620
WS
Wp Social Login and Register Social Counter
roxnor
5.3
0%
Dec 5Wp Social Login and Register Social Counter <= 3.1.3 - Missing Authorization in Cache REST Endpoints to Social Counter Tampering
CVE-2025-12358
SE
ShopEngine Elementor WooCommerce Builder Addon – All in One WooCommerce Solution
roxnor
4.3
0%
Dec 3ShopEngine <= 4.8.5 - Cross-Site Request Forgery to Wishlist Manipulation
CVE-2025-11888
SE
ShopEngine Elementor WooCommerce Builder Addon – All in One WooCommerce Solution
roxnor
2.7
0%
Oct 25ShopEngine Elementor WooCommerce Builder Addon – All in One WooCommerce Solution <= 4.8.4 - Incorrect Authorization to Authenticated (Editor+) License Status Update
CVE-2025-10861
PB
Popup builder with Gamification, Multi-Step Popups, Page-Level Targeting, and WooCommerce Triggers
roxnor
7.5
0%
Oct 24Popup builder with Gamification, Multi-Step Popups, Page-Level Targeting, and WooCommerce Triggers <= 2.1.4 - Unauthenticated Server-Side Request Forgery
CVE-2025-10862
PB
Popup builder with Gamification, Multi-Step Popups, Page-Level Targeting, and WooCommerce Triggers
roxnor
7.5
0%
Oct 9Popup builder with Gamification, Multi-Step Popups, Page-Level Targeting, and WooCommerce Triggers <= 2.1.3 - Unauthenticated SQL Injection via 'id'
CVE-2025-60106
EM
EmailKit
Roxnor
4.9
0%
Sep 26WordPress EmailKit Plugin <= 1.6.0 - Arbitrary Content Deletion Vulnerability
CVE-2025-10173
SE
ShopEngine Elementor WooCommerce Builder Addon – All in One WooCommerce Solution
roxnor
2.7
0%
Sep 26ShopEngine Elementor WooCommerce Builder Addon – All in One WooCommerce Solution <= 4.8.3 - Insufficient Authorization to Authenticated (Editor+) Settings Update
CVE-2025-48302
FU
FundEngine
Roxnor
7.5
1%
Aug 20WordPress FundEngine Plugin <= 1.7.4 - Local File Inclusion Vulnerability
CVE-2025-5684
MC
MetForm – Contact Form, Survey, Quiz, & Custom Form Builder for Elementor
roxnor
6.4
0%
Jul 29MetForm <= 4.0.1 - Authenticated(Contributor+) Stored Cross-Site Scripting via `mf-template` DOM Element
CVE-2025-3614
EE
ElementsKit Elementor Addons – Advanced Widgets & Templates Addons for Elementor
roxnor
5.4
0%
Jul 24ElementsKit Elementor Addons and Templates <= 3.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Widget
CVE-2025-4479
EE
ElementsKit Elementor Addons – Advanced Widgets & Templates Addons for Elementor
roxnor
5.4
0%
Jun 19ElementsKit Lite <= 3.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Comparison Widget
CVE-2025-47459
FU
FundEngine
Roxnor
4.3
0%
May 7WordPress WP Fundraising Donation and Crowdfunding Platform plugin <= 1.7.3 - Cross Site Request Forgery (CSRF) Vulnerability
CVE-2024-11180
EE
ElementsKit Elementor Addons – Advanced Widgets & Templates Addons for Elementor
roxnor
5.4
0%
Mar 29ElementsKit Elementor addons <= 3.4.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2025-30914
ME
Metform
Roxnor
4.4
0%
Mar 27WordPress Metform Elementor Contact Form Builder plugin <= 3.9.7 - Server Side Request Forgery (SSRF) vulnerability
CVE-2025-1506
WS
Wp Social Login and Register Social Counter
roxnor
4.3
0%
Feb 28Wp Social Login and Register Social Counter <= 3.1.0 - Cross-Site Request Forgery to Settings Update
CVE-2025-0968
EE
ElementsKit Elementor Addons – Advanced Widgets & Templates Addons for Elementor
roxnor
5.3
0%
Feb 19ElementsKit Elementor addons <= 3.4.0 - Unauthenticated Information Exposure via get_megamenu_content Function
CVE-2025-1005
EE
ElementsKit Elementor Addons – Advanced Widgets & Templates Addons for Elementor
roxnor
5.4
0%
Feb 15ElementsKit Elementor addons <= 3.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Accordion Widget
CVE-2023-50903
ME
Metform
Roxnor
9.8
1%
Dec 9WordPress Metform Elementor Contact Form Builder plugin <= 3.4.0 - Broken Access Control vulnerability
CVE-2024-37255
EE
ElementsKit Elementor addons Lite
Roxnor
5.3
0%
Nov 1WordPress ElementsKit Lite plugin <= 3.1.4 - Unauthenticated Broken Access Control vulnerability
CVE-2024-9501
WS
Wp Social Login and Register Social Counter
roxnor
9.8
1%
Oct 26Wp Social Login and Register Social Counter <= 3.0.7 - Authentication Bypass via WordPress.com OAuth provider
CVE-2024-10091
EE
ElementsKit Elementor Addons – Advanced Widgets & Templates Addons for Elementor
roxnor
5.4
0%
Oct 26ElementsKit Elementor addons <= 3.2.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Comparison Widget
CVE-2024-8546
EE
ElementsKit Elementor Addons – Advanced Widgets & Templates Addons for Elementor
roxnor
5.4
0%
Sep 25ElementsKit Elementor addons <= 3.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Video Widget
CVE-2023-0714
MC
MetForm – Contact Form, Survey, Quiz, & Custom Form Builder for Elementor
roxnor
9.8
1%
Aug 17Metform Elementor Contact Form Builder <= 3.2.4 - Unauthenticated Double-Extension Arbitrary File Upload
CVE-2024-6698
FD
FundEngine – Donation and Crowdfunding Platform
roxnor
8.8
0%
Aug 1FundEngine – Donation and Crowdfunding Platform <= 1.7.0 - Authenticated (Subscriber+) Privilege Escalation
CVE-2024-6455
EE
ElementsKit Elementor Addons – Advanced Widgets & Templates Addons for Elementor
roxnor
5.3
0%
Jul 18ElementsKit Elementor addons <= 3.2.0 - Unauthenticated Information Exposure via ekit_widgetarea_content Function