Vulnerabilities > Azexo
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2023-06-03 | CVE-2023-3051 | Cross-site Scripting vulnerability in Azexo Page Builder With Image MAP BY Azexo 1.27.133 The Page Builder by AZEXO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'azh_post' shortcode in versions up to, and including, 1.27.133 due to insufficient input sanitization and output escaping. | 5.4 |
| 2023-06-03 | CVE-2023-3052 | Cross-Site Request Forgery (CSRF) vulnerability in Azexo Page Builder With Image MAP BY Azexo 1.27.133 The Page Builder by AZEXO plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.27.133. | 8.8 |
| 2023-06-03 | CVE-2023-3053 | Missing Authorization vulnerability in Azexo Page Builder With Image MAP BY Azexo 1.27.133 The Page Builder by AZEXO plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'azh_add_post' function in versions up to, and including, 1.27.133. | 4.3 |
| 2023-06-03 | CVE-2023-3055 | Cross-Site Request Forgery (CSRF) vulnerability in Azexo Page Builder With Image MAP BY Azexo 1.27.133 The Page Builder by AZEXO plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.27.133. | 4.3 |