1.0.0

DATE	CVE	VULNERABILITY TITLE	RISK
2023-06-07	CVE-2020-36715	Missing Authorization vulnerability in Xootix Login/Signup Popup The Login/Signup Popup plugin for WordPress is vulnerable to authorization bypass due to missing capability checks on several functions in versions up to, and including, 1.4. network low complexity xootix CWE-862	4.6
2022-01-18	CVE-2022-0215	Cross-Site Request Forgery (CSRF) vulnerability in Xootix products The Login/Signup Popup, Waitlist Woocommerce ( Back in stock notifier ), and Side Cart Woocommerce (Ajax) WordPress plugins by XootiX are vulnerable to Cross-Site Request Forgery via the save_settings function found in the ~/includes/xoo-framework/admin/class-xoo-admin-settings.php file which makes it possible for attackers to update arbitrary options on a site that can be used to create an administrative user account and grant full privileged access to a compromised site. network xootix CWE-352	6.8