Azexo vulnerabilities
We track 3 vulnerabilities in Azexo products across 2 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on October 30, 2024.
Latest Azexo vulnerabilities
- 8.8 High severity
Marketing Automation by AZEXO: Incorrect Privilege Assignment
Incorrect Privilege Assignment vulnerability in azexo Marketing Automation by AZEXO marketing-automation-by-azexo allows Privilege Escalation.This issue affects Marketing Automation by AZEXO: from n/a through <= 1.27.80.
- 9.9 Critical severity
Marketing Automation by AZEXO: Unrestricted Upload of File with Dangerous Type
Unrestricted Upload of File with Dangerous Type vulnerability in azexo Marketing Automation by AZEXO marketing-automation-by-azexo allows Upload a Web Shell to a Web Server.This issue affects Marketing Automation by AZEXO: from n/a through <= 1.27.80.
- 8.8 High severity
Page Builder with Image Map by AZEXO: Cross-Site Request Forgery
The Page Builder by AZEXO plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.27.133. This is due to missing or incorrect nonce validation on the 'azh_add_post', 'azh_duplicate_post', 'azh_update_post' and 'azh_