Xootix Login/signup Popup — known CVE vulnerabilities

Every CVE whose affected-product data names Xootix Login/signup Popup, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2022-0215 — CVSS 8.8 (high): The Login/Signup Popup, Waitlist Woocommerce ( Back in stock notifier ), and Side Cart Woocommerce (Ajax) WordPress plugins by XootiX are…
• CVE-2024-5324 — CVSS 8.8 (high): Multiple plugins for WordPress utilizing the XootiX Framework are vulnerable to unauthorized modification of data due to a missing…
• CVE-2020-36715 — CVSS 7.4 (high): The Login/Signup Popup plugin for WordPress is vulnerable to authorization bypass due to missing capability checks on several functions in…
• CVE-2025-1064 — CVSS 6.4 (medium): The Login/Signup Popup ( Inline Form + Woocommerce ) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's…
• CVE-2024-5665 — CVSS 4.3 (medium): The Login/Signup Popup ( Inline Form + Woocommerce ) plugin for WordPress is vulnerable to unauthorized access of data due to a missing…