CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

3 matches found

Rapid7 Vulnerability Database (full)•added 2026/05/01 12:00 a.m.•6 views

CVE-2026-6127: Improper Neutralization of Input During Web Page Generation

The Elementor Website Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the elementordata meta field in versions up to, and including, 4.0.4. This is due to insufficient input sanitization when processing form-encoded REST API requests. The plugin registers the...

6.4CVSS5.9AI score0.00357EPSS

SaveExploits0References2

Rapid7 Vulnerability Database (full)•added 2026/02/03 12:00 a.m.•3 views

CVE-2026-1210: Improper Neutralization of Input During Web Page Generation

The Happy Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'elementordata' meta field in all versions up to, and including, 3.20.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

6.4CVSS6.1AI score0.0035EPSS

SaveExploits0References1

Rapid7 Vulnerability Database (full)•added 2025/05/31 12:00 a.m.•6 views

CVE-2025-3813: Improper Neutralization of Input During Web Page Generation

The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘elementordata’ parameter in all versions up to, and including, 1.7.1020 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attacker...

6.4CVSS6AI score0.00254EPSS

SaveExploits0References1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by