Crowd Favorite DXP ToolKit

• CVE-2026-115607 Critical 9.3 WordPress DXP ToolKit plugin <= 2.0.1 - SQL Injection vulnerability 0.2%
• CVE-2026-115606 High 7.1 WordPress DXP ToolKit plugin <= 2.0.1 - Cross Site Scripting (XSS) vulnerability 0.1%