foxtheme
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Foxtool All-in-One: Contact chat button, Custom login, Media optimize images | 2 | – | Sep 18, 2026 |
Exploited and recent CVEs
- CVE-2026-18317 Foxtool All-in-One: Contact chat button, Custom login, Media optimize images <= 2.5.3 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Settings Modification via 'option_key' Parameter of toggle_watermark AJAX Action 0.4%
- CVE-2025-13408 Foxtool All-in-One: Contact chat button, Custom login, Media optimize images <= 2.5.2 - Cross-Site Request Forgery to Google OAuth Connection 0.2%