DevriX

Products

Product	CVEs	Exploited	Latest
Easy Image Gallery	2	–	Mar 25, 2026
Restrict User Registration	2	–	Oct 3, 2025
DX Dark Site	1	–	Dec 13, 2024
DX Sales CRM	1	–	Mar 3, 2025
Hashtags	1	–	Mar 11, 2025

CVE-2026-4766 Medium 6.4 Easy Image Gallery <= 1.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Gallery Shortcode Post Meta 0.2%
CVE-2025-9892 Medium 5.3 Restrict User Registration <= 1.0.1 - Cross-Site Request Forgery to Settings Update 0.1%
CVE-2025-2540 Medium 6.4 Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via prettyPhoto JavaScript Library 0.3%
CVE-2025-32655 High 7.1 WordPress Restrict User Registration plugin <= 1.0.1 - CSRF to Stored XSS vulnerability 0.2%
CVE-2025-28931 High 7.1 WordPress WordPress Hashtags plugin <= 0.3.2 - CSRF to Stored XSS vulnerability 0.2%
CVE-2025-23575 High 7.1 WordPress DX Sales CRM plugin <= 1.1 - Reflected Cross Site Scripting (XSS) vulnerability 0.4%
CVE-2024-54337 High 7.1 WordPress DX Dark Site plugin <= 1.0.1 - CSRF to Stored Cross-Site Scripting vulnerability 0.2%