Skip to content
OpenAdvisories

Vendor

Crowd Favorite

3 known vulnerabilities.

Products

DXP ToolKit 2 CF Internal Link Shortcode 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.3
    CVE-2026-115607

    WordPress DXP ToolKit plugin <= 2.0.1 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Crowd Favorite DXP ToolKit dxp-toolkit allows SQL Injection.This issue affects DXP ToolKit: from n/a through 2.0.1.

    Crowd Favorite DXP ToolKit