Skip to content
OpenAdvisories

Vendor

Crowd Favorite

3 known vulnerabilities.

Products

DXP ToolKit 2 CF Internal Link Shortcode 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.1
    CVE-2026-115606

    WordPress DXP ToolKit plugin <= 2.0.1 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crowd Favorite DXP ToolKit dxp-toolkit allows Stored XSS.This issue affects DXP ToolKit: from n/a through 2.0.1.

    Crowd Favorite DXP ToolKit
  • High 7.5
    CVE-2024-12404 Public exploit

    CF Internal Link Shortcode <= 1.1.0 - Unauthenticated SQL Injection

    The CF Internal Link Shortcode plugin for WordPress is vulnerable to SQL Injection via the 'post_title' parameter in all versions up to, and including, 1.1.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the…

    Crowd Favorite CF Internal Link Shortcode Web / CMS