What’s Vulnerable › Products

foxtheme Foxtool All-in-One: Contact chat button, Custom login, Media optimize images vulnerabilities

2 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your foxtheme Foxtool All-in-One: Contact chat button, Custom login, Media optimize images version is affected

Latest foxtheme Foxtool All-in-One: Contact chat button, Custom login, Media optimize images vulnerabilities

• CVE-2026-18317 — Foxtool All-in-One: Contact chat button, Custom login, Media optimize images <= 2.5.3 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Settings Modification via 'option_key' Parameter of toggle_watermark AJAX Action (CVSS 4.3)
• CVE-2025-13408 — Foxtool All-in-One: Contact chat button, Custom login, Media optimize images <= 2.5.2 - Cross-Site Request Forgery to Google OAuth Connection (CVSS 4.3)