Skip to content
OpenAdvisories

Vendor

devrix

7 known vulnerabilities.

Products

Easy Image Gallery 2 Restrict User Registration 2 Hashtags 1 DX Dark Site 1 DX Sales CRM 1
All Critical High Medium Low Exploited only

7 results · Feed

  • Medium 6.4
    CVE-2026-4766

    Easy Image Gallery <= 1.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Gallery Shortcode Post Meta

    The Easy Image Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Gallery shortcode post meta field in all versions up to, and including, 1.5.3. This is due to insufficient input sanitization and output escaping on user-supplied…

    devrix Easy Image Gallery Web / CMS
  • Medium 5.3
    CVE-2025-9892

    Restrict User Registration <= 1.0.1 - Cross-Site Request Forgery to Settings Update

    The Restrict User Registration plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.1. This is due to missing or incorrect nonce validation on the update() function. This makes it possible for unauthentica…

    devrix Restrict User Registration Web / CMS
  • Medium 6.4
    CVE-2025-2540

    Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via prettyPhoto JavaScript Library

    Multiple plugins for WordPress are vulnerable to Stored Cross-Site Scripting via the plugin's bundled prettyPhoto library (version 3.1.6) in various versions due to insufficient input sanitization and output escaping on user supplied attributes. This makes it…

    devrix fuzzoid nayon46 wptipsntricks
  • High 7.1
    CVE-2025-32655

    WordPress Restrict User Registration plugin <= 1.0.1 - CSRF to Stored XSS vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in DevriX Restrict User Registration restrict-user-registration allows Stored XSS.This issue affects Restrict User Registration: from n/a through <= 1.0.1.

    devrix Restrict User Registration
  • High 7.1
    CVE-2025-28931

    WordPress WordPress Hashtags plugin <= 0.3.2 - CSRF to Stored XSS vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in DevriX Hashtags wp-hashtags allows Stored XSS.This issue affects Hashtags: from n/a through <= 0.3.2.

    devrix Hashtags
  • High 7.1
    CVE-2025-23575

    WordPress DX Sales CRM plugin <= 1.1 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in DevriX DX Sales CRM dx-sales-crm allows Reflected XSS.This issue affects DX Sales CRM: from n/a through <= 1.1.

    devrix DX Sales CRM
  • High 7.1
    CVE-2024-54337

    WordPress DX Dark Site plugin <= 1.0.1 - CSRF to Stored Cross-Site Scripting vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in DevriX DX Dark Site devrix-dark-site allows Stored XSS.This issue affects DX Dark Site: from n/a through <= 1.0.1.

    devrix DX Dark Site