Devrix
7 CVEs across 6 Devrix products. Browse Devrix vulnerabilities, severities, and proof-of-concept exploits.
Devrix products with known CVEs
Devrix CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2026-4766 | Medium | 6.4 | 2026-03-25 | The Easy Image Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Gallery shortcode post meta field in all versions up to, and i… |
CVE-2025-9892 | Medium | 5.3 | 2025-10-03 | The Restrict User Registration plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.1. This is due to mis… |
CVE-2025-2540 | Medium | 6.4 | 2025-07-03 | Multiple plugins for WordPress are vulnerable to Stored Cross-Site Scripting via the plugin's bundled prettyPhoto library (version 3.1.6) in various versions d… |
CVE-2025-32655 | High | 7.1 | 2025-04-17 | Cross-Site Request Forgery (CSRF) vulnerability in DevriX Restrict User Registration restrict-user-registration allows Stored XSS.This issue affects Restrict U… |
CVE-2025-28931 | High | 7.1 | 2025-03-11 | Cross-Site Request Forgery (CSRF) vulnerability in DevriX Hashtags wp-hashtags allows Stored XSS.This issue affects Hashtags: from n/a through <= 0.3.2. |
CVE-2025-23575 | High | 7.1 | 2025-03-03 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in DevriX DX Sales CRM dx-sales-crm allows Reflected XSS.Thi… |
CVE-2024-54337 | High | 7.1 | 2024-12-13 | Cross-Site Request Forgery (CSRF) vulnerability in DevriX DX Dark Site devrix-dark-site allows Stored XSS.This issue affects DX Dark Site: from n/a through <=… |
CVE-2022-2001 | High | 8.8 | 2022-07-18 | The DX Share Selection plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including 1.4. This is due to missing nonce prot… |