What’s Vulnerable › Products

xootix Login & Register Customizer – Popup | Slider | Inline | WooCommerce vulnerabilities

5 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your xootix Login & Register Customizer – Popup | Slider | Inline | WooCommerce version is affected

Latest xootix Login & Register Customizer – Popup | Slider | Inline | WooCommerce vulnerabilities

• CVE-2025-1064 — Login/Signup Popup ( Inline Form + Woocommerce ) <= 2.8.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via xoo_el_action Shortcode (CVSS 5.4)
• CVE-2024-5665 — Login/Signup Popup ( Inline Form + Woocommerce ) 2.7.1 - 2.7.2 - Missing Authorization to Arbitrary Options Exposure (CVSS 4.3)
• CVE-2024-5324 — XootiX Framework <= Various Plugin Versions - Missing Authorization to Arbitrary Options Update (CVSS 8.8)
• CVE-2020-36715 — Login/Signup Popup < 1.5 - Missing Authorization (CVSS 4.6)
• CVE-2022-0215 — XootiX Plugins <= Various Versions Cross-Site Request Forgery to Arbitrary Options Update (CVSS 8.8)