Duongancol
5 CVEs across 2 Duongancol products. Browse Duongancol vulnerabilities, severities, and proof-of-concept exploits.
Duongancol products with known CVEs
Duongancol CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2026-4805 | Medium | 6.4 | 2026-04-28 | The Woostify plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 2.5.0 This is due to insufficient input saniti… |
CVE-2025-60101 | Medium | 5.9 | 2025-09-26 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in duongancol Woostify woostify allows Stored XSS.This issue… |
CVE-2024-10794 | Medium | 4.3 | 2024-11-13 | The Boostify Header Footer Builder for Elementor plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.3.6 via the… |
CVE-2024-4788 | Medium | 4.3 | 2024-06-06 | The Boostify Header Footer Builder for Elementor plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on t… |
CVE-2024-5006 | Medium | 6.4 | 2024-06-05 | The Boostify Header Footer Builder for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘size’ parameter in all versions up… |