Skip to content

Crowd Favorite

Products

Product	CVEs	Exploited	Latest
DXP ToolKit	2	–	Oct 28, 2026

Exploited and recent CVEs

CVE-2026-115607 Critical 9.3 WordPress DXP ToolKit plugin <= 2.0.1 - SQL Injection vulnerability 0.2%
CVE-2026-115606 High 7.1 WordPress DXP ToolKit plugin <= 2.0.1 - Cross Site Scripting (XSS) vulnerability 0.1%