WordPress X Addons for Elementor plugin <= 1.0.23 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Abu Hurayra in WordPress Plugin X Addons for Elementor versions = 1.0.23...

CVE-2025-32185

creationtimestamp| type| source ---|---|--- 2026-01-07 15:01:10+00:00| seen| Telegram/utadLXNkSCvrMbTZz54AhdBQKOBTuhF91QCnJiq7ebTgUxA...

CVE-2026-21876

creationtimestamp| type| source ---|---|--- 2026-01-07 15:00:13+00:00| published-proof-of-concept| Telegram/8x5IQVKl8yNMPOO1jEKzXeeCkVbSWNHK9QgypiDD-W4b3o 2026-01-07 21:00:04+00:00| published-proof-of-concept| Telegram/zaWOloGTmuxgYwScvhSZBdX4Ig42r1BJF11flVCmJ6M5QnQ 2026-01-07 21:09:46+00:00| see...

CVE-2025-63083

creationtimestamp| type| source ---|---|--- 2026-01-07 14:50:20+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mbtpontlva2s...

CVE-2025-15479

creationtimestamp| type| source ---|---|--- 2026-01-07 14:29:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbtoikkrzi2q...

CVE-2026-0650

creationtimestamp| type| source ---|---|--- 2026-01-07 14:20:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbtnz6aqwu2c...

CVE-2025-31643

creationtimestamp| type| source ---|---|--- 2026-01-07 14:15:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbtnq7t27e2c 2026-01-07 17:51:45+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbtzt233we2a 2026-01-07 17:52:52+00:00| seen|...

CVE-2026-22244

creationtimestamp| type| source ---|---|--- 2026-01-07 13:52:29+00:00| published-proof-of-concept| https://github.com/open-metadata/OpenMetadata/security/advisories/GHSA-5f29-2333-h9c7 2026-01-08 17:15:40+00:00| seen| Telegram/KVWOQnBiY3Eem9HhxjtYUT7TdVna0GpQEMRBO0Jx4tvF1fc 2026-01-08...

CVE-2025-13847

creationtimestamp| type| source ---|---|--- 2026-01-07 11:26:59+00:00| seen| https://gist.github.com/Darkcrai86/6623a58338368c9dd48d98fb7335a714...

CVE-2025-13694

creationtimestamp| type| source ---|---|--- 2026-01-07 11:26:24+00:00| seen| https://gist.github.com/Darkcrai86/a8c20d14cd8fc023538ea92ceea633a3...

CVE-2025-13667

creationtimestamp| type| source ---|---|--- 2026-01-07 11:25:27+00:00| seen| https://gist.github.com/Darkcrai86/0f0eec21a5289340d0d2097400a19b95...

CVE-2025-14128

creationtimestamp| type| source ---|---|--- 2026-01-07 11:24:50+00:00| seen| https://gist.github.com/Darkcrai86/45a5d24e997bc4c4840353a81c4ec227...

CVE-2025-14121

creationtimestamp| type| source ---|---|--- 2026-01-07 11:14:32+00:00| seen| https://gist.github.com/Darkcrai86/1ac9719381f457cf09c1ed43f7e20f0e...

CVE-2025-13520

creationtimestamp| type| source ---|---|--- 2026-01-07 09:51:09+00:00| seen| https://gist.github.com/Darkcrai86/000524f5a150e02d172b22b6d40593ea...

CVE-2024-30547

creationtimestamp| type| source ---|---|--- 2026-01-07 08:34:07+00:00| seen| https://gist.github.com/Darkcrai86/5be5d05b0682d7999758b25a1539b750...

CVE-2025-14370

creationtimestamp| type| source ---|---|--- 2026-01-07 08:26:16+00:00| seen| https://gist.github.com/Darkcrai86/fba8f5f147c9be50d4c267297564161d...

CVE-2025-14888

creationtimestamp| type| source ---|---|--- 2026-01-07 08:25:09+00:00| seen| https://gist.github.com/Darkcrai86/03aa2437ad6b5457a8b15be0293722ee...

CVE-2025-14845

creationtimestamp| type| source ---|---|--- 2026-01-07 08:24:44+00:00| seen| https://gist.github.com/Darkcrai86/f0786fcd68ece5123463001c653b3ec2...

CVE-2025-14842

creationtimestamp| type| source ---|---|--- 2026-01-07 08:23:29+00:00| seen| https://gist.github.com/Darkcrai86/400f04ec994b9f870a51c015a0ccdf4c...

CVE-2025-14867

creationtimestamp| type| source ---|---|--- 2026-01-07 08:23:05+00:00| seen| https://gist.github.com/Darkcrai86/0d448b4e0a6e01d4b558db801906cbf7...