Xootix Otp Login & Register Woocommerce
4 CVEs affecting Xootix Otp Login & Register Woocommerce. Latest disclosed: 2026-09-19. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-5324 | High | 8.8 | 2024-06-06 | Multiple plugins for WordPress utilizing the XootiX Framework are vulnerable to unauthorized modification of data due to a missing capability check on the 'imp… |
CVE-2023-2706 | High | 8.1 | 2023-05-17 | The OTP Login Woocommerce & Gravity Forms plugin for WordPress is vulnerable to authentication bypass. This is due to the fact that when generating OTP codes f… |
CVE-2026-12215 | Medium | 5.3 | 2026-09-11 | The OTP Login & Register Woocommerce plugin for WordPress is vulnerable to Authentication Bypass via OTP Brute Force in all versions up to, and including, 2.7… |
CVE-2026-12402 | Medium | 4.4 | 2026-09-19 | The OTP Login & Register Woocommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'fb-config' Setting in all versions up to, and inclu… |