1178 matches found
WordPress The Plus Addons for Elementor <4.1.12 - Cross-Site Scripting
WordPress The Plus Addons for Elementor plugin before 4.1.12 is susceptible to cross-site scripting. The plugin does not properly sanitize some of its fields in the heplusmorepost AJAX action, which is exploitable by both unauthenticated and authenticated users. An attacker can inject arbitrary...
essential-addons-for-elementor-xss-poc
π Essential Addons for Elementor XSS μ·¨μ½μ νμ§κΈ° π¨ μ€μ μ 보 μ΄ λꡬλ 보μ μ°κ΅¬ λ° ν¨μΉ λͺ©μ μΌλ‘λ§ μ¬μ©λ©λλ€. μ¬μ΄νΈμ ν΄λ₯Ό λΌμΉλ λ° μ¬μ©νμ§ λ§μμμ€. μ·¨μ½ν μ¬μ΄νΈλ₯Ό λ°κ²¬ν κ²½μ° μ¬μ΄νΈ μμ μμκ² μ± μκ° μκ² λ³΄κ³ νμ¬ μ¦μ μ λ°μ΄νΈν μ μλλ‘ νμμμ€. β οΈ μ·¨μ½μ μΈλΆ μ 보 Essential Addons for Elementorμ λ°μ¬ν XSS μ·¨μ½μ μ΄ 6.0.15 λ―Έλ§ λ²μ μ μ¬μ©νλ 10λ§ κ° μ΄μμ μΉμ¬μ΄νΈμ μν₯μ λ―ΈμΉ©λλ€. μ΄ μ·¨μ½μ μλ CVE-2025-24752 κ°...
CVE-2026-105875
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in BdThemes Prime Slider β Addons For Elementor bdthemes-prime-slider-lite allows Stored XSS.This issue affects Prime Slider β Addons For Elementor: from n/a through 4.6.2...
CVE-2026-104393
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in weDevs Happy Addons for Elementor happy-elementor-addons allows Stored XSS.This issue affects Happy Addons for Elementor: from n/a through 3.50.0...
EUVD-2026-94256
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in weDevs Happy Addons for Elementor happy-elementor-addons allows Stored XSS.This issue affects Happy Addons for Elementor: from n/a through 3.50.0...
CVE-2026-104393 WordPress Happy Addons for Elementor plugin <= 3.50.0 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in weDevs Happy Addons for Elementor happy-elementor-addons allows Stored XSS.This issue affects Happy Addons for Elementor: from n/a through 3.50.0...
CVE-2026-104393
The Happy Addons for Elementor plugin for WordPress (versions through 3.50.0 ) is vulnerable to a Stored Cross-Site Scripting (XSS) flaw. The root cause is the improper neutralization of input during web page generation within the happy-elementor-addons component. This vulnerability allows an att...
CVE-2026-104393 WordPress Happy Addons for Elementor plugin <= 3.50.0 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in weDevs Happy Addons for Elementor happy-elementor-addons allows Stored XSS.This issue affects Happy Addons for Elementor: from n/a through 3.50.0...
CVE-2026-105875
The BdThemes Prime Slider β Addons For Elementor (bdthemes-prime-slider-lite ) plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is the improper neutralization of input during web page generation . This vulnerability affects versions from n/a through 4.6.2 ....
CVE-2026-105875 WordPress Prime Slider β Addons For Elementor plugin <= 4.6.2 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in BdThemes Prime Slider β Addons For Elementor bdthemes-prime-slider-lite allows Stored XSS.This issue affects Prime Slider β Addons For Elementor: from n/a through 4.6.2...
EUVD-2026-94254
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in BdThemes Prime Slider β Addons For Elementor bdthemes-prime-slider-lite allows Stored XSS.This issue affects Prime Slider β Addons For Elementor: from n/a through 4.6.2...
CVE-2026-105875 WordPress Prime Slider β Addons For Elementor plugin <= 4.6.2 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in BdThemes Prime Slider β Addons For Elementor bdthemes-prime-slider-lite allows Stored XSS.This issue affects Prime Slider β Addons For Elementor: from n/a through 4.6.2...
WordPress Happy Addons for Elementor plugin <= 3.50.0 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Intrudify in WordPress Plugin Happy Addons for Elementor versions = 3.50.0...
WordPress Prime Slider β Addons For Elementor plugin <= 4.6.2 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Intrudify in WordPress Plugin Prime Slider β Addons For Elementor versions = 4.6.2...
PT-2026-107457
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in weDevs Happy Addons for Elementor happy-elementor-addons allows Stored XSS.This issue affects Happy Addons for Elementor: from n/a through 3.50.0...
PT-2026-107461
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in BdThemes Prime Slider β Addons For Elementor bdthemes-prime-slider-lite allows Stored XSS.This issue affects Prime Slider β Addons For Elementor: from n/a through 4.6.2...
CVE-2026-39754
Contributor Arbitrary File Download in Piotnet Addons For Elementor = 7.1.71 versions...
CVE-2026-39754 WordPress Piotnet Addons For Elementor plugin <= 7.1.71 - Arbitrary File Download vulnerability
Contributor Arbitrary File Download in Piotnet Addons For Elementor = 7.1.71 versions...