XootiX vulnerabilities
We track 3 vulnerabilities in XootiX products across 9 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on June 6, 2024.
Latest XootiX vulnerabilities
- 8.8 High severity
Waitlist Woocommerce ( Back in stock notifier ): Incorrect Authorization
Multiple plugins for WordPress utilizing the XootiX Framework are vulnerable to unauthorized modification of data due to a missing capability check on the 'import_settings' function in various versions. This makes it possible for authenticated attackers, with
- 8.1 High severity
OTP Login & Register Woocommerce: Improper Authentication
The OTP Login Woocommerce & Gravity Forms plugin for WordPress is vulnerable to authentication bypass. This is due to the fact that when generating OTP codes for users to use in order to login via phone number, the plugin returns these codes in an AJAX respons
- 8.8 High severity
Login/Signup Popup: Cross-Site Request Forgery
The Login/Signup Popup, Waitlist Woocommerce ( Back in stock notifier ), and Side Cart Woocommerce (Ajax) WordPress plugins by XootiX are vulnerable to Cross-Site Request Forgery via the save_settings function found in the ~/includes/xoo-framework/admin/class-