PX-lab

Products

ProductCVEsExploitedLatest
BoomBox Theme Extensions2–Mar 19, 2025
Zombify2–Oct 9, 2026

Exploited and recent CVEs

  • CVE-2026-94503 Critical 10.0 WordPress Zombify plugin <= 1.7.7 - Arbitrary File Upload vulnerability 0.4%
  • CVE-2025-8385 Medium 6.8 Zombify <= 1.7.5 - Authenticated (Subscriber+) Path Traversal to Arbitrary File Read 0.4%
  • CVE-2024-12295 High 8.8 BoomBox Theme Extensions <= 1.8.0 - Authenticated (Subscriber+) Privilege Escalation via Password Reset/Account Takeover in boombox_ajax_reset_password 0.4%
  • CVE-2024-12859 High 8.8 BoomBox Theme Extensions <= 1.8.0 - Authenticated (Contributor+) Local File Inclusion via Shortcode 0.6%