Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

XootiX — Vulnerabilities & Security Advisories 11

Browse all 11 CVE security advisories affecting XootiX. AI-powered Chinese analysis, POCs, and references for each vulnerability.

XootiX is a web-based collaboration platform primarily used for team project management and document sharing. Historically, it has been vulnerable to multiple security issues including remote code execution, cross-site scripting, and privilege escalation vulnerabilities. The platform has accumulated 11 CVEs to date, with several critical flaws allowing unauthorized access and system compromise. Notable characteristics include insufficient input validation and weak authentication mechanisms in previous versions. While recent releases have addressed many issues, the historical vulnerability pattern suggests ongoing need for rigorous security testing, particularly in areas of user permissions and data handling.

CVE ID Title CVSS Severity Published
CVE-2025-50027 WordPress Login/Signup Popup plugin <= 2.9.4 - Cross Site Scripting (XSS) Vulnerability — Login/Signup Popup CWE-79 5.9 Medium 2025-06-20
CVE-2025-1064 Login/Signup Popup ( Inline Form + Woocommerce ) <= 2.8.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via xoo_el_action Shortcode — Login & Register Customizer – Popup | Slider | Inline | WooCommerce CWE-79 6.4 Medium 2025-02-20
CVE-2024-43134 WordPress Waitlist Woocommerce plugin <= 2.6 - Broken Access Control vulnerability — Waitlist Woocommerce ( Back in stock notifier ) CWE-862 4.3 Medium 2024-11-01
CVE-2024-8724 Waitlist Woocommerce ( Back in stock notifier ) <= 2.7.5 - Reflected Cross-Site Scripting — Waitlist Woocommerce ( Back in stock notifier ) CWE-79 6.1 Medium 2024-09-14
CVE-2024-5665 Login/Signup Popup ( Inline Form + Woocommerce ) 2.7.1 - 2.7.2 - Missing Authorization to Arbitrary Options Exposure — Login/Signup Popup ( Inline Form + Woocommerce ) 4.3 Medium 2024-06-06
CVE-2024-5324 XootiX Framework <= Various Plugin Versions - Missing Authorization to Arbitrary Options Update — Waitlist Woocommerce ( Back in stock notifier ) CWE-862 8.8 High 2024-06-06
CVE-2023-28415 WordPress Side Cart Woocommerce (Ajax) Plugin <= 2.2 is vulnerable to Cross Site Scripting (XSS) — Side Cart Woocommerce (Ajax) CWE-79 5.9 Medium 2023-08-30
CVE-2020-36715 Login/Signup Popup < 1.5 - Missing Authorization — Login & Register Customizer – Popup | Slider | Inline | WooCommerce CWE-862 7.4 High 2023-06-07
CVE-2022-45376 WordPress Side Cart Woocommerce (Ajax) Plugin < 2.1 is vulnerable to Cross Site Request Forgery (CSRF) — Side Cart Woocommerce (Ajax) CWE-352 4.3 Medium 2023-05-22
CVE-2023-2706 OTP Login Woocommerce & Gravity Forms <= 2.2 - Authentication Bypass to Privilege Escalation — OTP Login & Register Woocommerce CWE-287 8.1 High 2023-05-17
CVE-2022-0215 XootiX Plugins <= Various Versions Cross-Site Request Forgery to Arbitrary Options Update — Login/Signup Popup CWE-352 8.8 High 2022-01-18

This page lists every published CVE security advisory associated with XootiX. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.