Log in Start free

XootiX

Products

ProductCVEsExploitedLatest
Waitlist Woocommerce ( Back in stock notifier )6–Oct 28, 2026
OTP Login & Register Woocommerce4–Sep 19, 2026
Login & Register Customizer – Popup | Slider | Inline | WooCommerce3–Feb 20, 2025
Side Cart Woocommerce (Ajax)3–Aug 30, 2023
Login/Signup Popup2–Jun 20, 2025
Login/Signup Popup ( Inline Form + Woocommerce )1–Jun 6, 2024
Side Cart Woocommerce | Woocommerce Cart1–Jun 6, 2024

Exploited and recent CVEs

  • CVE-2026-77188 Medium 6.4 Waitlist Woocommerce ( Back in stock notifier ) <= 2.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'type' Shortcode Attribute 0.2%
  • CVE-2026-114701 Medium 6.5 WordPress Waitlist Woocommerce ( Back in stock notifier ) plugin <= 2.9.1 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-12402 Medium 4.4 OTP Login & Register Woocommerce <= 2.7.3 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'fb-config' Setting 0.3%
  • CVE-2026-12215 Medium 5.3 OTP Login & Register Woocommerce <= 2.7.2 - Unauthenticated Authentication Bypass via Brute Force 0.6%
  • CVE-2025-50027 Medium 5.9 WordPress Login/Signup Popup plugin <= 2.9.4 - Cross Site Scripting (XSS) Vulnerability 0.3%
  • CVE-2025-1064 Medium 6.4 Login/Signup Popup ( Inline Form + Woocommerce ) <= 2.8.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via xoo_el_action Shortcode 0.3%
  • CVE-2024-43134 Medium 4.3 WordPress Waitlist Woocommerce plugin <= 2.6 - Broken Access Control vulnerability 0.3%
  • CVE-2024-8724 Medium 6.1 Waitlist Woocommerce ( Back in stock notifier ) <= 2.7.5 - Reflected Cross-Site Scripting 0.4%
  • CVE-2024-5665 Medium 4.3 Login/Signup Popup ( Inline Form + Woocommerce ) 2.7.1 - 2.7.2 - Missing Authorization to Arbitrary Options Exposure 0.4%
  • CVE-2024-5324 High 8.8 XootiX Framework <= Various Plugin Versions - Missing Authorization to Arbitrary Options Update 1.5%
  • CVE-2024-5324 High 8.8 XootiX Framework <= Various Plugin Versions - Missing Authorization to Arbitrary Options Update 1.5%
  • CVE-2024-5324 High 8.8 XootiX Framework <= Various Plugin Versions - Missing Authorization to Arbitrary Options Update 1.5%
  • CVE-2024-5324 High 8.8 XootiX Framework <= Various Plugin Versions - Missing Authorization to Arbitrary Options Update 1.5%
  • CVE-2023-28415 Medium 5.9 WordPress Side Cart Woocommerce (Ajax) Plugin <= 2.2 is vulnerable to Cross Site Scripting (XSS) 0.5%
  • CVE-2020-36715 High 7.4 Login/Signup Popup < 1.5 - Missing Authorization 0.7%
  • CVE-2022-45376 Medium 4.3 WordPress Side Cart Woocommerce (Ajax) Plugin < 2.1 is vulnerable to Cross Site Request Forgery (CSRF) 0.3%
  • CVE-2023-2706 High 8.1 OTP Login Woocommerce & Gravity Forms <= 2.2 - Authentication Bypass to Privilege Escalation 1.7%
  • CVE-2022-0215 High 8.8 XootiX Plugins <= Various Versions Cross-Site Request Forgery to Arbitrary Options Update 0.8%
  • CVE-2022-0215 High 8.8 XootiX Plugins <= Various Versions Cross-Site Request Forgery to Arbitrary Options Update 0.8%
  • CVE-2022-0215 High 8.8 XootiX Plugins <= Various Versions Cross-Site Request Forgery to Arbitrary Options Update 0.8%