Skip to content
OpenAdvisories

Vendor

roxnor

94 known vulnerabilities.

Products

MetForm – Contact Form, Survey, Quiz, & Custom Form Builder for Elementor 23 ElementsKit Elementor Addons – Advanced Widgets & Templates Addons for Elementor 19 FundEngine 6 Wp Social Login and Register Social Counter 6 WP Ultimate Review 6 Popup builder with Gamification, Multi-Step Popups, Page-Level Targeting, and WooCommerce Triggers 5 ShopEngine Elementor WooCommerce Builder Addon – All in One WooCommerce Solution with eCommerce Templates & Woo Widgets 5 EmailKit – Email Customizer for WooCommerce & WP 4 FundEngine – Donation and Crowdfunding Platform 3 ElementsKit Elementor addons Lite 3 GetGenie – AI Content Writer with Keyword Research & SEO Tracking Tools 3 Metform 3 GetGenie 3 PopupKit 2 MetForm – Contact Form, Survey, Quiz, Conditional Forms, Form Templates & Custom Form Builder for Elementor 1 EmailKit 1 Rox Appointment Booking – Event, Calendar & Appointment Scheduling 1
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-73993

    WordPress FundEngine plugin <= 1.7.9 - PHP Object Injection vulnerability

    Unauthenticated PHP Object Injection in FundEngine <= 1.7.9 versions.

    roxnor FundEngine
  • Critical 9.8
    CVE-2026-32470

    WordPress FundEngine plugin <= 1.7.9 - PHP Object Injection vulnerability

    Unauthenticated PHP Object Injection in FundEngine <= 1.7.9 versions.

    roxnor FundEngine
  • Critical 10.0
    CVE-2026-23693 Scanner template

    ElementsKit Elementor Addons < 3.7.9 Unauthenticated Mailchimp REST Endpoint

    ElementsKit Elementor Addons – Advanced Widgets & Templates Addons for Elementor (elementskit-lite) WordPress plugin versions prior to 3.7.9 expose the REST endpoint /wp-json/elementskit/v1/widget/mailchimp/subscribe without authentication. The endpoint accep…

    roxnor ElementsKit Elementor Addons – Advanced Widgets & Templates Addons for Elementor Web / CMS
  • Critical 9.8
    CVE-2024-9501

    Wp Social Login and Register Social Counter <= 3.0.7 - Authentication Bypass via WordPress.com OAuth provider

    The Wp Social Login and Register Social Counter plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 3.0.7. This is due to insufficient verification on the user being returned by the social login token. This makes …

    roxnor Wp Social Login and Register Social Counter Web / CMS