Alexvtn

10 CVEs across 7 Alexvtn products. Browse Alexvtn vulnerabilities, severities, and proof-of-concept exploits.

Alexvtn products with known CVEs

ProductCVEs
Chatbox Manager3
Wip Woocarousel Lite2
Content Snippet Manager1
Custom Thank You Page For Woocommerce1
Internal Linking Of Related Contents1
Suevafree Essential Kit1
Wip Incoming Lite1
Alexvtn CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-4806Medium6.52026-09-24The Custom Thank You Page for WooCommerce plugin for WordPress is vulnerable to unauthorized access and loss of data due to a missing capability check on the s…
CVE-2025-58211Medium6.52025-08-27Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in alexvtn Chatbox Manager wa-chatbox-manager allows Stored…
CVE-2025-49884Medium6.52025-07-16Missing Authorization vulnerability in alexvtn Internal Linking of Related Contents internal-linking-of-related-contents allows Exploiting Incorrectly Configur…
CVE-2025-48167Medium5.42025-07-16Missing Authorization vulnerability in alexvtn Chatbox Manager wa-chatbox-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This…
CVE-2025-30790Medium5.32025-03-27Missing Authorization vulnerability in alexvtn Chatbox Manager wa-chatbox-manager allows Accessing Functionality Not Properly Constrained by ACLs.This issue af…
CVE-2025-30769High7.12025-03-27Cross-Site Request Forgery (CSRF) vulnerability in alexvtn WIP WooCarousel Lite wip-woocarousel-lite allows Stored XSS.This issue affects WIP WooCarousel Lite…
CVE-2025-26759High7.12025-02-16Cross-Site Request Forgery (CSRF) vulnerability in alexvtn Content Snippet Manager content-snippet-manager allows Stored XSS.This issue affects Content Snippet…
CVE-2024-11779Medium6.42024-12-05The WIP WooCarousel Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wip_woocarousel_products_carousel' shortcode in al…
CVE-2024-11432Medium6.42024-11-21The SuevaFree Essential Kit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'counter' shortcode in all versions up to, and i…
CVE-2024-11416Medium6.12024-11-21The WIP Incoming Lite plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1.1. This is due to missing or i…