azexo
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Page Builder with Image Map by AZEXO | 4 | – | Jun 2, 2023 |
| Marketing Automation by AZEXO | 2 | – | Oct 30, 2024 |
| Elastik Page Builder | 1 | – | Oct 1, 2024 |
| Mynx Page Builder | 1 | – | Oct 12, 2024 |
Exploited and recent CVEs
- CVE-2024-50506 WordPress Marketing Automation by AZEXO plugin <= 1.27.80 - Privilege Escalation vulnerability 0.5%
- CVE-2024-50480 WordPress Marketing Automation by AZEXO plugin <= 1.27.80 - Arbitrary File Upload vulnerability 0.5%
- CVE-2024-9656 Mynx Page Builder <= 0.27.8 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload 0.3%
- CVE-2024-9274 Elastik Page Builder <= 0.27.4 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload 0.3%
- CVE-2023-3053 Page Builder by AZEXO <= 1.27.133 - Missing Authorization to Post Creation 0.5%
- CVE-2023-3052 Page Builder by AZEXO <= 1.27.133 - Cross-Site Request Forgery to Post Creation/Modification/Deletion 0.3%
- CVE-2023-3055 Page Builder by AZEXO <= 1.27.133 - Cross-Site Request Forgery to Stored Cross-Site Scripting via azh_save 0.2%
- CVE-2023-3051 Page Builder by AZEXO <= 1.27.133 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode 0.5%