Vendor

    wpWax

    54 known vulnerabilities in products by wpWax, 0 of them actively exploited (CISA KEV).

    Key figures

    54

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    5

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in wpWax
    CriticalCVE-2026-3141

    Missing Authorization (CVE-2026-3141)

    		9.1
    CriticalCVE-2026-59518

    WordPress Directorist plugin <= 8.8.2 - PHP Object Injection vulnerability

    		9.8
    HighCVE-2026-17092

    Missing Authorization (CVE-2026-17092)

    		8.1
    HighCVE-2024-2006

    wpWax Post Grid\, Slider \& Carousel Ultimate: Deserialization of Untrusted Data

    		8.8
    CriticalCVE-2026-32474

    WordPress Templatiq plugin <= 0.2.5 - Arbitrary File Upload vulnerability

    		9.9
    HighCVE-2025-10488

    Path Traversal (CVE-2025-10488)

    		8.1
    MediumCVE-2022-2376

    Directorist < 7.3.1 - Unauthenticated Email Address Disclosure

    		5.3
    HighCVE-2024-1950

    wpWax Product Carousel Slider & Grid Ultimate for WooCommerce: Deserialization of Untrusted Data

    		7.5
    HighCVE-2023-1888

    wpWax Directorist: Improper Input Validation

    		8.8
    HighCVE-2024-12040

    wpWax Product Carousel Slider & Grid Ultimate for WooCommerce: PHP Remote File Inclusion

    		8.8
    HighCVE-2024-1951

    Deserialization of Untrusted Data (CVE-2024-1951)

    		7.5
    CriticalCVE-2025-32658

    WordPress HelpGent plugin <= 2.2.5 - PHP Object Injection vulnerability

    		9.8
    HighCVE-2024-13409

    wpWax Post Grid\, Slider \& Carousel Ultimate: Path Traversal

    		7.5
    HighCVE-2026-22460

    WordPress FormGent plugin <= 1.7.0 - Arbitrary File Deletion vulnerability

    		8.6
    HighCVE-2026-94499

    WordPress FormGent plugin <= 1.12.2 - Broken Access Control vulnerability

    		7.1
    MediumCVE-2025-32499

    WordPress Logo Showcase Ultimate plugin <= 1.4.4 - Local File Inclusion vulnerability

    		6.5
    HighCVE-2021-24981

    Directorist – Business Directory Plugin < 7.0.6.2 - CSRF to Remote File Upload

    		7.5
    HighCVE-2024-13408

    Post Grid: PHP Remote File Inclusion

    also in 1 other product

    		7.5
    MediumCVE-2026-100185

    Cross-site Scripting (CVE-2026-100185)

    		6.4
    HighCVE-2025-15028

    Cross-site Scripting (CVE-2025-15028)

    		7.2
    MediumCVE-2026-122661

    WordPress Directorist plugin <= 8.10.7 - Cross Site Scripting (XSS) vulnerability

    		6.5
    MediumCVE-2026-119497

    WordPress Directorist plugin <= 8.10.6 - Cross Site Scripting (XSS) vulnerability

    		6.5
    HighCVE-2026-49073

    WordPress Directorist Booking plugin <= 3.0.3 - SQL Injection vulnerability

    		8.5
    CriticalCVE-2025-1570

    wpWax Directorist: Weak Password Recovery Mechanism for Forgotten Password

    		8.1
    MediumCVE-2022-3961

    Directorist < 7.4.4 - Subscriber+ Sensitive Information Disclosure

    		6.5

    All vulnerabilities in search

    Products

    Products by wpWax
    Directorist180
    Directorist: Ai-powered Business Directory, Listings & Classified Ads100
    Post Grid\, Slider \& Carousel Ultimate70
    Legal Pages60
    Product Carousel Slider & Grid Ultimate For Woocommerce50
    Post Grid, Slider & Carousel Ultimate – With Shortcode, Gutenberg Block & Elementor Widget30