Skip to content
OpenAdvisories

Product · wpxpo

PostX

10 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Medium 5.3
    CVE-2025-68606

    WordPress PostX plugin <= 5.0.3 - Sensitive Data Exposure vulnerability

    Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in WPXPO PostX ultimate-post allows Retrieve Embedded Sensitive Data.This issue affects PostX: from n/a through <= 5.0.3.

    wpxpo PostX
  • Medium 6.5
    CVE-2025-31096

    WordPress PostX plugin <= 4.1.25 - Cross Site Scripting (XSS) Vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPXPO PostX ultimate-post allows DOM-Based XSS.This issue affects PostX: from n/a through <= 4.1.25.

    wpxpo PostX
  • Medium 6.5
    CVE-2024-53818

    WordPress PostX plugin <= 4.1.15 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPXPO PostX ultimate-post.This issue affects PostX: from n/a through <= 4.1.15.

    wpxpo PostX
  • Medium 5.9
    CVE-2024-50513

    WordPress PostX plugin <= 4.1.15 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPXPO PostX ultimate-post allows Stored XSS.This issue affects PostX: from n/a through <= 4.1.15.

    wpxpo PostX
  • Medium 6.5
    CVE-2024-50443

    WordPress PostX plugin <= 4.1.12 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPXPO PostX ultimate-post.This issue affects PostX: from n/a through <= 4.1.12.

    wpxpo PostX
  • Medium 5.4
    CVE-2024-31246

    WordPress PostX plugin <= 3.2.3 - Author+ Post/Page Duplication vulnerability

    Missing Authorization vulnerability in WPXPO PostX ultimate-post allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PostX: from n/a through <= 3.2.3.

    wpxpo PostX
  • Medium 6.5
    CVE-2024-32564

    WordPress PostX plugin <= 4.0.1 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPXPO PostX ultimate-post allows DOM-Based XSS.This issue affects PostX: from n/a through <= 4.0.1.

    wpxpo PostX