Skip to content
OpenAdvisories

Vendor

azexo

8 known vulnerabilities.

Products

Page Builder with Image Map by AZEXO 4 Marketing Automation by AZEXO 2 Mynx Page Builder 1 Elastik Page Builder 1
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Medium 6.4
    CVE-2024-9656

    Mynx Page Builder <= 0.27.8 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload

    The Mynx Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 0.27.8 due to insufficient input sanitization and output escaping. This makes it possible for authenticated atta…

    azexo Mynx Page Builder Web / CMS
  • Medium 6.4
    CVE-2024-9274

    Elastik Page Builder <= 0.27.4 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload

    The Elastik Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 0.27.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated a…

    azexo Elastik Page Builder Web / CMS
  • Medium 5.4
    CVE-2023-3053

    Page Builder by AZEXO <= 1.27.133 - Missing Authorization to Post Creation

    The Page Builder by AZEXO plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'azh_add_post' function in versions up to, and including, 1.27.133. This makes it possible for authenticated attackers t…

    azexo Page Builder with Image Map by AZEXO Web / CMS
  • Medium 6.3
    CVE-2023-3052

    Page Builder by AZEXO <= 1.27.133 - Cross-Site Request Forgery to Post Creation/Modification/Deletion

    The Page Builder by AZEXO plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.27.133. This is due to missing or incorrect nonce validation on the 'azh_add_post', 'azh_duplicate_post', 'azh_update_post' and 'azh…

    azexo Page Builder with Image Map by AZEXO Web / CMS
  • Medium 6.4
    CVE-2023-3051

    Page Builder by AZEXO <= 1.27.133 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

    The Page Builder by AZEXO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'azh_post' shortcode in versions up to, and including, 1.27.133 due to insufficient input sanitization and output escaping. This makes it possible for contributor-…

    azexo Page Builder with Image Map by AZEXO Web / CMS
  • Medium 6.1
    CVE-2023-3055

    Page Builder by AZEXO <= 1.27.133 - Cross-Site Request Forgery to Stored Cross-Site Scripting via azh_save

    The Page Builder by AZEXO plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.27.133. This is due to missing or incorrect nonce validation on the 'azh_save' function. This makes it possible for unauthenticated …

    azexo Page Builder with Image Map by AZEXO Web / CMS