CVEs we hold for Roxnor
Records whose assigning authority named Roxnor as the affected vendor. Newest identifiers first, capped at 200.
CVE-2026-85575The ShopEngine Elementor WooCommerce Builder Addon – All in One WooCommerce Solution with eCommerce Templates & Woo…roxnor ShopEngine Elementor WooCommerce Builder Addon – All…
CVE-2026-76063FundEngine <= 1.8.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'wfp_featured_video_url' Parameterroxnor FundEngine – Donation and Crowdfunding Platform
CVE-2026-75971ShopEngine Elementor WooCommerce Builder Addon <= 4.9.4 - Authenticated (Shop Manager+) Privilege Escalation to WXR…roxnor ShopEngine Elementor WooCommerce Builder Addon – All…
CVE-2026-75930FundEngine <= 1.8.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Modification via…roxnor FundEngine – Donation and Crowdfunding Platform
CVE-2026-73993WordPress FundEngine plugin <= 1.7.9 - PHP Object Injection vulnerabilityRoxnor FundEngine
CVE-2026-65440WordPress GetGenie plugin <= 4.4.3 - Cross Site Scripting (XSS) vulnerabilityRoxnor GetGenie
CVE-2026-5957EmailKit <= 1.6.5 - Authenticated (Author+) Arbitrary File Read via 'emailkit-editor-template' REST Parameterroxnor EmailKit – Email Customizer for WooCommerce & WP
CVE-2026-59560WordPress FundEngine plugin <= 1.7.8 - Broken Access Control vulnerabilityRoxnor FundEngine
CVE-2026-57406WordPress FundEngine plugin <= 1.7.6 - Broken Access Control vulnerabilityRoxnor FundEngine
CVE-2026-57316WordPress GetGenie plugin <= 4.4.2 - Sensitive Data Exposure vulnerabilityRoxnor GetGenie
CVE-2026-4362ElementsKit Elementor Addons <= 3.8.2 - Missing Authorization to Unauthenticated Widget Content Overwriteroxnor ElementsKit Elementor Addons – Advanced Widgets &…
CVE-2026-39644WordPress Wp Ultimate Review plugin <= 2.3.8 - Broken Access Control vulnerabilityRoxnor Wp Ultimate Review
CVE-2026-3474EmailKit <= 1.6.3 - Authenticated (Administrator+) Path Traversal via 'emailkit-editor-template' REST API Parameterroxnor EmailKit – Email Customizer for WooCommerce & WP
CVE-2026-32470WordPress FundEngine plugin <= 1.7.9 - PHP Object Injection vulnerabilityRoxnor FundEngine
CVE-2026-2879GetGenie <= 4.3.2 - Insecure Direct Object Reference to Authenticated (Author+) Arbitrary Post Overwrite/Deletionroxnor GetGenie – AI Content Writer with Keyword Research &…
CVE-2026-2600ElementsKit Elementor Addons and Templates <= 3.7.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via…roxnor ElementsKit Elementor Addons – Advanced Widgets &…
CVE-2026-24356WordPress GetGenie plugin <= 4.3.0 - Broken Access Control vulnerabilityRoxnor GetGenie
CVE-2026-23693ElementsKit Elementor Addons < 3.7.9 Unauthenticated Mailchimp REST EndpointRoxnor ElementsKit Elementor Addons – Advanced Widgets &…
CVE-2026-2257GetGenie <= 4.3.2 - Insecure Direct Object Reference to Authenticated (Author+) Stored Cross-Site Scripting via REST APIroxnor GetGenie – AI Content Writer with Keyword Research &…
CVE-2026-1925EmailKit – Email Customizer for WooCommerce & WP <= 1.6.2 - Missing Authorization to Authenticated (Subscriber+)…roxnor EmailKit – Email Customizer for WooCommerce & WP
CVE-2026-18100MetForm <= 4.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'mf_form_id' Widget Settingroxnor MetForm – Contact Form, Survey, Quiz, Conditional…
CVE-2026-1003GetGenie – AI Content Writer with Keyword Research & SEO Tracking Tools <= 4.3.0 - Missing Authorization to…roxnor GetGenie – AI Content Writer with Keyword Research &…
CVE-2026-0633MetForm – Contact Form, Survey, Quiz, & Custom Form Builder for Elementor <= 4.1.0 - Unauthenticated Form Submission…roxnor MetForm – Contact Form, Survey, Quiz, & Custom Form…
CVE-2025-69026WordPress PopupKit plugin <= 2.1.5 - Sensitive Data Exposure vulnerabilityRoxnor PopupKit
CVE-2025-63057WordPress Wp Ultimate Review plugin <= 2.3.7 - Cross Site Scripting (XSS) vulnerabilityRoxnor Wp Ultimate Review
CVE-2025-60106WordPress EmailKit Plugin <= 1.6.0 - Arbitrary Content Deletion VulnerabilityRoxnor EmailKit
CVE-2025-5684MetForm <= 4.0.1 - Authenticated(Contributor+) Stored Cross-Site Scripting via `mf-template` DOM Elementroxnor MetForm – Contact Form, Survey, Quiz, & Custom Form…
CVE-2025-48302WordPress FundEngine Plugin <= 1.7.4 - Local File Inclusion VulnerabilityRoxnor FundEngine
CVE-2025-47459WordPress WP Fundraising Donation and Crowdfunding Platform plugin <= 1.7.3 - Cross Site Request Forgery (CSRF)…Roxnor FundEngine
CVE-2025-4479ElementsKit Lite <= 3.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Comparison Widgetroxnor ElementsKit Elementor Addons – Advanced Widgets &…
CVE-2025-3614ElementsKit Elementor Addons and Templates <= 3.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via…roxnor ElementsKit Elementor Addons – Advanced Widgets &…
CVE-2025-30914WordPress Metform Elementor Contact Form Builder plugin <= 3.9.7 - Server Side Request Forgery (SSRF) vulnerabilityRoxnor Metform
CVE-2025-1506Wp Social Login and Register Social Counter <= 3.1.0 - Cross-Site Request Forgery to Settings Updateroxnor Wp Social Login and Register Social Counter
CVE-2025-14895PopupKit <= 2.2.0 - Missing Authorization to Sensitive Information Disclosure and Data Deletionroxnor Popup builder with Gamification, Multi-Step Popups…
CVE-2025-14441Popupkit <= 2.2.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Subscriber Data Deletionroxnor Popup builder with Gamification, Multi-Step Popups…
CVE-2025-14059EmailKit <= 1.6.1 - Authenticated (Author+) Arbitrary File Read via Path Traversalroxnor EmailKit – Email Customizer for WooCommerce & WP
CVE-2025-13620Wp Social Login and Register Social Counter <= 3.1.3 - Missing Authorization in Cache REST Endpoints to Social Counter…roxnor Wp Social Login and Register Social Counter
CVE-2025-13192Popup builder with Gamification <= 2.2.0 - Unauthenticated SQL Injection via Multiple REST API Endpointsroxnor Popup builder with Gamification, Multi-Step Popups…
CVE-2025-12358ShopEngine <= 4.8.5 - Cross-Site Request Forgery to Wishlist Manipulationroxnor ShopEngine Elementor WooCommerce Builder Addon – All…
CVE-2025-11888ShopEngine Elementor WooCommerce Builder Addon – All in One WooCommerce Solution <= 4.8.4 - Incorrect Authorization to…roxnor ShopEngine Elementor WooCommerce Builder Addon – All…
CVE-2025-10862Popup builder with Gamification, Multi-Step Popups, Page-Level Targeting, and WooCommerce Triggers <= 2.1.3 -…roxnor Popup builder with Gamification, Multi-Step Popups…
CVE-2025-10861Popup builder with Gamification, Multi-Step Popups, Page-Level Targeting, and WooCommerce Triggers <= 2.1.4 -…roxnor Popup builder with Gamification, Multi-Step Popups…
CVE-2025-10173ShopEngine Elementor WooCommerce Builder Addon – All in One WooCommerce Solution <= 4.8.3 - Insufficient Authorization…roxnor ShopEngine Elementor WooCommerce Builder Addon – All…
CVE-2025-1005ElementsKit Elementor addons <= 3.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Accordion…roxnor ElementsKit Elementor Addons – Advanced Widgets &…
CVE-2025-0968ElementsKit Elementor addons <= 3.4.0 - Unauthenticated Information Exposure via get_megamenu_content Functionroxnor ElementsKit Elementor Addons – Advanced Widgets &…
CVE-2024-9501Wp Social Login and Register Social Counter <= 3.0.7 - Authentication Bypass via WordPress.com OAuth providerroxnor Wp Social Login and Register Social Counter
CVE-2024-8546ElementsKit Elementor addons <= 3.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Video Widgetroxnor ElementsKit Elementor Addons – Advanced Widgets &…
CVE-2024-6698FundEngine – Donation and Crowdfunding Platform <= 1.7.0 - Authenticated (Subscriber+) Privilege Escalationroxnor FundEngine – Donation and Crowdfunding Platform
CVE-2024-6455ElementsKit Elementor addons <= 3.2.0 - Unauthenticated Information Exposure via ekit_widgetarea_content Functionroxnor ElementsKit Elementor Addons – Advanced Widgets &…
CVE-2024-4266MetForm – Contact Form, Survey, Quiz, & Custom Form Builder for Elementor <= 3.8.8 - Unauthenticated Sensitive…roxnor MetForm – Contact Form, Survey, Quiz, & Custom Form…
CVE-2024-37255WordPress ElementsKit Lite plugin <= 3.1.4 - Unauthenticated Broken Access Control vulnerabilityRoxnor ElementsKit Elementor addons Lite
CVE-2024-3499ElementsKit Elementor addons <= 3.1.0 - Authenticated (Contributor+) Local File Inclusion via Onepage Scroll Moduleroxnor ElementsKit Elementor Addons – Advanced Widgets &…
CVE-2024-32505WordPress ElementsKit Elementor addons plugin <= 3.0.6 - Cross Site Scripting (XSS) vulnerabilityRoxnor ElementsKit Elementor addons Lite
CVE-2024-2803ElementsKit Elementor addons <= 3.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widgetroxnor ElementsKit Elementor Addons – Advanced Widgets &…
CVE-2024-2791Metform Elementor Contact Form Builder <= 3.8.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Widgetsroxnor MetForm – Contact Form, Survey, Quiz, & Custom Form…
CVE-2024-21746WordPress Wp Ultimate Review plugin <= 2.3.6 - IP limit Bypass vulnerabilityRoxnor Wp Ultimate Review
CVE-2024-2047ElementsKit Elementor addons <= 3.0.6 - Authenticated (Contributor+) Local File Inclusion in render_rawroxnor ElementsKit Elementor Addons – Advanced Widgets &…
CVE-2024-2042ElementsKit Elementor addons <= 3.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Accordion…roxnor ElementsKit Elementor Addons – Advanced Widgets &…
CVE-2024-1763Wp Social Login and Register Social Counter <= 3.0.0 - Missing Authorization to Unauthenticated Social Login/Share…roxnor Wp Social Login and Register Social Counter
CVE-2024-1585Metform Elementor Contact Form Builder <= 3.8.3 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcoderoxnor MetForm – Contact Form, Survey, Quiz, & Custom Form…
CVE-2024-1239ElementsKit Elementor addons <= 3.0.4 - Authenticated (Contributor+) Stored Cross-Site Scriptingroxnor ElementsKit Elementor Addons – Advanced Widgets &…
CVE-2024-1238ElementsKit Elementor addons <= 3.0.6 - Authenticated (Contributor+) Stored Cross-Site Scriptingroxnor ElementsKit Elementor Addons – Advanced Widgets &…
CVE-2024-11180ElementsKit Elementor addons <= 3.4.7 - Authenticated (Contributor+) Stored Cross-Site Scriptingroxnor ElementsKit Elementor Addons – Advanced Widgets &…
CVE-2024-10091ElementsKit Elementor addons <= 3.2.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Comparison…roxnor ElementsKit Elementor Addons – Advanced Widgets &…
CVE-2023-6788Metform Elementor Contact Form Builder <= 3.8.1 - Cross-Site Request Forgeryroxnor MetForm – Contact Form, Survey, Quiz, & Custom Form…
CVE-2023-6582ElementsKit Lite <= 3.0.3 - Unauthenticated Sensitive Information Exposureroxnor ElementsKit Elementor Addons – Advanced Widgets &…
CVE-2023-6525ElementsKit Elementor addons <= 3.0.3 - Authenticated(Editor+) Stored Cross-Site Scriptingroxnor ElementsKit Elementor Addons – Advanced Widgets &…
CVE-2023-50903WordPress Metform Elementor Contact Form Builder plugin <= 3.4.0 - Broken Access Control vulnerabilityRoxnor Metform
CVE-2023-2517Metform Elementor Contact Form Builder <= 3.3.2 - Cross-Site Request Forgery via permalink_setuproxnor MetForm – Contact Form, Survey, Quiz, & Custom Form…
CVE-2023-1843Metform Elementor Contact Form Builder <= 3.3.0 - Missing Authorizationroxnor MetForm – Contact Form, Survey, Quiz, & Custom Form…
CVE-2023-0721Metform Elementor Contact Form Builder <= 3.3.0 - Unauthenticated CSV Injectionroxnor MetForm – Contact Form, Survey, Quiz, & Custom Form…
CVE-2023-0714Metform Elementor Contact Form Builder <= 3.2.4 - Unauthenticated Double-Extension Arbitrary File Uploadroxnor MetForm – Contact Form, Survey, Quiz, & Custom Form…
CVE-2023-0710Metform Elementor Contact Form Builder <= 3.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via…roxnor MetForm – Contact Form, Survey, Quiz, & Custom Form…
CVE-2023-0709Metform Elementor Contact Form Builder <= 3.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via…roxnor MetForm – Contact Form, Survey, Quiz, & Custom Form…
CVE-2023-0708Metform Elementor Contact Form Builder <= 3.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via…roxnor MetForm – Contact Form, Survey, Quiz, & Custom Form…
CVE-2023-0695Metform Elementor Contact Form Builder <= 3.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via mf…roxnor MetForm – Contact Form, Survey, Quiz, & Custom Form…
CVE-2023-0694Metform Elementor Contact Form Builder <= 3.3.1 - Authenticated (Subscriber+) Information Disclosure via mf shortcoderoxnor MetForm – Contact Form, Survey, Quiz, & Custom Form…
CVE-2023-0693Metform Elementor Contact Form Builder <= 3.3.1 - Authenticated (Subscriber+) Information Disclosure via…roxnor MetForm – Contact Form, Survey, Quiz, & Custom Form…
CVE-2023-0692Metform Elementor Contact Form Builder <= 3.3.1 - Authenticated (Subscriber+) Information Disclosure via…roxnor MetForm – Contact Form, Survey, Quiz, & Custom Form…
CVE-2023-0691Metform Elementor Contact Form Builder <= 3.3.1 - Authenticated (Subscriber+) Information Disclosure via mf_last_name…roxnor MetForm – Contact Form, Survey, Quiz, & Custom Form…
CVE-2023-0689Metform Elementor Contact Form Builder <= 3.3.1 - Authenticated (Subscriber+) Information Disclosure via…roxnor MetForm – Contact Form, Survey, Quiz, & Custom Form…
CVE-2023-0688Metform Elementor Contact Form Builder <= 3.3.1 - Authenticated (Subscriber+) Information Disclosure via mf_thankyou…roxnor MetForm – Contact Form, Survey, Quiz, & Custom Form…
CVE-2023-0085Metform Elementor Contact Form Builder <= 3.2.1 - reCaptcha Protection Bypassroxnor MetForm – Contact Form, Survey, Quiz, & Custom Form…
CVE-2023-0084Metform Elementor Contact Form Builder <= 3.1.2 - Unauthenticated Stored Cross-Site Scriptingroxnor MetForm – Contact Form, Survey, Quiz, & Custom Form…
CVE-2022-1442Metform Elementor Contact Form Builder <= 2.1.3 - Sensitive Information Disclosureroxnor MetForm – Contact Form, Survey, Quiz, & Custom Form…
87 records, read from the index as it stood on 20 Sep 2026. Every row opens the record it names, and every value on that record opens its own receipt.
Everything on this page is free. Public data. Withholding it protects nothing.