azexo

Products

ProductCVEsExploitedLatest
Page Builder with Image Map by AZEXO4–Jun 2, 2023
Marketing Automation by AZEXO2–Oct 30, 2024
Elastik Page Builder1–Oct 1, 2024
Mynx Page Builder1–Oct 12, 2024

Exploited and recent CVEs

  • CVE-2024-50506 High 8.8 WordPress Marketing Automation by AZEXO plugin <= 1.27.80 - Privilege Escalation vulnerability 0.5%
  • CVE-2024-50480 Critical 9.9 WordPress Marketing Automation by AZEXO plugin <= 1.27.80 - Arbitrary File Upload vulnerability 0.5%
  • CVE-2024-9656 Medium 6.4 Mynx Page Builder <= 0.27.8 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload 0.3%
  • CVE-2024-9274 Medium 6.4 Elastik Page Builder <= 0.27.4 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload 0.3%
  • CVE-2023-3053 Medium 5.4 Page Builder by AZEXO <= 1.27.133 - Missing Authorization to Post Creation 0.5%
  • CVE-2023-3052 Medium 6.3 Page Builder by AZEXO <= 1.27.133 - Cross-Site Request Forgery to Post Creation/Modification/Deletion 0.3%
  • CVE-2023-3055 Medium 6.1 Page Builder by AZEXO <= 1.27.133 - Cross-Site Request Forgery to Stored Cross-Site Scripting via azh_save 0.2%
  • CVE-2023-3051 Medium 6.4 Page Builder by AZEXO <= 1.27.133 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode 0.5%