VYPR

WowAddons

by WordPress

CVEs (2)

  • CVE-2026-57377Jul 13, 2026
    risk 0.00cvss epss 0.00

    Missing Authorization vulnerability in WPXPO WowAddons product-addons allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WowAddons: from n/a through <= 1.6.8.

  • CVE-2026-57686Jul 2, 2026
    risk 0.00cvss epss 0.00

    Unauthenticated Cross Site Scripting (XSS) in WowAddons <= 1.6.14 versions.