Threat Database

Threat Entry Updated 2026-06-17

Wooexim - Cross-Site Scripting (XSS) (CVE-2025-1288)

The WOOEXIM WordPress plugin through 5.0.0 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make an unauthenticated user vulnerable to reflected XSS via a CSRF attack.

PLUGIN Wooexim

CVE-2025-1288

MEDIUM CVSS 6.1 2025-05-15

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

Wooexim - PHP Object Injection (CVE-2025-23944)

Deserialization of Untrusted Data vulnerability in bulktheme WOOEXIM wooexim allows Object Injection.This issue affects WOOEXIM: from n/a through

PLUGIN Wooexim

CVE-2025-23944

HIGH CVSS 8.8 2025-01-22

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

Wooexim - SQL Injection (CVE-2025-22533)

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in bulktheme WOOEXIM wooexim allows SQL Injection.This issue affects WOOEXIM: from n/a through

PLUGIN Wooexim

CVE-2025-22533

HIGH CVSS 7.6 2025-01-07

Risk Score

Open Full Technical Breakdown