Skip to content
OpenAdvisories

Vendor

odude

7 known vulnerabilities.

Products

Crypto Tool 5 Flexi – Guest Submit 2
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 5.3
    CVE-2025-11986 Public exploit

    Crypto Tool <= 2.22 - Unauthenticated Information Exposure via Global Authentication State

    The Crypto plugin for WordPress is vulnerable to Information exposure in all versions up to, and including, 2.22. This is due to the plugin registering an unauthenticated AJAX action (wp_ajax_nopriv_crypto_connect_ajax_process) that allows calling the registe…

    odude Crypto Tool Web / CMS
  • Medium 5.3
    CVE-2025-11988 Public exploit

    Crypto Tool <= 2.22 - Missing Authentication to Unauthenticated Limited File Deletion

    The Crypto plugin for WordPress is vulnerable to unauthorized manipulation of data in all versions up to, and including, 2.22. This is due to the plugin registering an unauthenticated AJAX action (wp_ajax_nopriv_crypto_connect_ajax_process) that allows callin…

    odude Crypto Tool Web / CMS
  • Medium 6.4
    CVE-2025-9129

    Flexi <= 4.28 - Authenticated (Contributor+) Stored Cross-Site Scripting via flexi-form-tag Shortcode

    The Flexi plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin for WordPress's flexi-form-tag shortcode in all versions up to, and including, 4.28 due to insufficient input sanitization and output escaping on user supplied attribut…

    odude Flexi – Guest Submit Web / CMS