Devrix

8 CVEs across 6 Devrix products. Browse Devrix vulnerabilities, severities, and proof-of-concept exploits.

Devrix products with known CVEs

ProductCVEs
Easy Image Gallery2
Restrict User Registration2
Dx Dark Site1
Dx Sales Crm1
Dx Share Selection1
Hashtags1
Devrix CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-4766Medium6.42026-03-25The Easy Image Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Gallery shortcode post meta field in all versions up to, and i…
CVE-2025-9892Medium5.32025-10-03The Restrict User Registration plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.1. This is due to mis…
CVE-2025-2540Medium6.42025-07-03Multiple plugins for WordPress are vulnerable to Stored Cross-Site Scripting via the plugin's bundled prettyPhoto library (version 3.1.6) in various versions d…
CVE-2025-32655High7.12025-04-17Cross-Site Request Forgery (CSRF) vulnerability in DevriX Restrict User Registration restrict-user-registration allows Stored XSS.This issue affects Restrict U…
CVE-2025-28931High7.12025-03-11Cross-Site Request Forgery (CSRF) vulnerability in DevriX Hashtags wp-hashtags allows Stored XSS.This issue affects Hashtags: from n/a through <= 0.3.2.
CVE-2025-23575High7.12025-03-03Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in DevriX DX Sales CRM dx-sales-crm allows Reflected XSS.Thi…
CVE-2024-54337High7.12024-12-13Cross-Site Request Forgery (CSRF) vulnerability in DevriX DX Dark Site devrix-dark-site allows Stored XSS.This issue affects DX Dark Site: from n/a through <=…
CVE-2022-2001High8.82022-07-18The DX Share Selection plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including 1.4. This is due to missing nonce prot…