Skip to content
OpenAdvisories

Vendor

wpWax

46 known vulnerabilities.

Products

Directorist: AI-Powered Business Directory, Listings & Classified Ads 10 Directorist 7 Product Carousel Slider & Grid Ultimate for WooCommerce 4 Legal Pages 4 Post Grid, Slider & Carousel Ultimate – with Shortcode, Gutenberg Block & Elementor Widget 3 FormGent 2 Logo Showcase Ultimate – Logo Carousel, Logo Slider & Logo Grid 2 Team (WordPress plugin) 2 FormGent – Next-Gen AI Form Builder for WordPress with Multi-Step, Quizzes, Payments & More 2 Post Grid, Slider & Carousel Ultimate 2 Logo Showcase Ultimate 1 HelpGent 1 Directorist AddonsKit for Elementor 1 Templatiq 1 Logo Carousel Slider 1 Directorist – WordPress Business Directory Plugin with Classified Ads Listings 1 Directorist Booking 1 Legal Pages – Privacy Policy, Terms & Conditions, GDPR, CCPA, and Cookie Notice Generator 1
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Critical 9.9
    CVE-2026-32474

    WordPress Templatiq plugin <= 0.2.5 - Arbitrary File Upload vulnerability

    Contributor Arbitrary File Upload in Templatiq <= 0.2.5 versions.

    wpWax Templatiq
  • Critical 9.1
    CVE-2026-3141

    FormGent <= 1.9.2- Missing Authorization to Unauthenticated Arbitrary File Deletion via 'file_token' Parameter

    The FormGent plugin for WordPress is vulnerable to unauthorized arbitrary file deletion due to a missing capability check on the /wp-json/formgent/responses/attachments REST API endpoint in all versions up to, and including, 1.9.2 This is due to the REST API …

    wpWax FormGent – Next-Gen AI Form Builder for WordPress with Multi-Step, Quizzes, Payments & More Web / CMS
  • Critical 9.8
    CVE-2026-59518

    WordPress Directorist plugin <= 8.8.2 - PHP Object Injection vulnerability

    Deserialization of Untrusted Data vulnerability in wpWax Directorist directorist allows Object Injection.This issue affects Directorist: from n/a through <= 8.8.2.

    wpWax Directorist
  • Critical 9.8
    CVE-2025-32658

    WordPress HelpGent plugin <= 2.2.5 - PHP Object Injection vulnerability

    Deserialization of Untrusted Data vulnerability in wpWax HelpGent helpgent allows Object Injection.This issue affects HelpGent: from n/a through <= 2.2.5.

    wpWax HelpGent