Crowd Favorite has 2 CVEs on record. 2 were published in the last 90 days. The median CVSS is 8.2 (high), with 1 rated critical.

CVEs per month

Last 12 months, by publish date

1225/120126/010226/020326/030426/040526/050626/060726/070826/080926/091026/101126/11

Exploited share: 0% vs 1% corpus
Median CVSS: 8.2
Publish → KEV: —
Last 90 days: 2 prev 0

Weakness classes

Products

dxp-toolkit 2

Follow Crowd Favorite:RSS feed Save a search →Embed badge ↗

Total CVEs

Critical

CISA KEV

Exploited

Worst active — by depth score

Crowd Favorite vulnerabilities

CVEs affecting Crowd Favorite, newest first. Open any entry for full detail, references, and exploit status.

2 CVEsRSS

CVE-2026-115606High· 7.1

1w ago

WordPress DXP ToolKit plugin <= 2.0.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crowd Favorite DXP ToolKit dxp-toolkit allows Stored XSS.This issue affects DXP ToolKit: from n/a through 2.0.1.

▾ TwilightCrowd Favorite · dxp-toolkitEPSS 0.15%via CVEORG

CVE-2026-115607Critical· 9.3

1w ago

WordPress DXP ToolKit plugin <= 2.0.1 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Crowd Favorite DXP ToolKit dxp-toolkit allows SQL Injection.This issue affects DXP ToolKit: from n/a through 2.0.1.

▾ MidnightCrowd Favorite · dxp-toolkitEPSS 0.24%via CVEORG