XootiX OTP Login & Register Woocommerce

• CVE-2026-12402 Medium 4.4 OTP Login & Register Woocommerce <= 2.7.3 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'fb-config' Setting 0.3%
• CVE-2026-12215 Medium 5.3 OTP Login & Register Woocommerce <= 2.7.2 - Unauthenticated Authentication Bypass via Brute Force 0.6%
• CVE-2024-5324 High 8.8 XootiX Framework <= Various Plugin Versions - Missing Authorization to Arbitrary Options Update 1.5%
• CVE-2023-2706 High 8.1 OTP Login Woocommerce & Gravity Forms <= 2.2 - Authentication Bypass to Privilege Escalation 1.7%