CVE-2024-51665

CVE-2024-51665 Magical Addons For Elementor = 1.2.1 - Authenticated Subscriber+ Server-Side Request Forgery Description: The Magical Addons For Elementor Header Footer Builder, Free Elementor Widgets, Elementor Templates Library plugin for WordPress is vulnerable to Server-Side Request Forgery in...

CVE-2023-5360

CVE-2023-5360 다음을 위한 오픈소스 익스플로잇 Royal Elementor Addons and Templates WordPress 플러그인 1.3.79 이전 버전은 업로드된 파일을 제대로 검증하지 않아, 인증되지 않은 사용자가 PHP와 같은 임의의 파일을 업로드하여 RCE를 달성할 수 있습니다. 목차 소개 기능 사용법 전제 조건 설치 익스플로잇 실행 결과 및 로그 면책 조항 라이선스 작성자 기부 소개 이 저장소에는 Royal Elementor Addons 플러그인을 사용하는 웹사이트에서 WordPress 취약점...

CVE-2026-103344

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Unlimited Elements Unlimited Elements For Elementor Free Widgets, Addons, Templates unlimited-elements-for-elementor allows Reflected XSS.This issue affects Unlimited Elements For Elementor Free...

CVE-2026-103355 WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.20 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Unlimited Elements Unlimited Elements For Elementor Free Widgets, Addons, Templates unlimited-elements-for-elementor allows Blind SQL Injection.This issue affects Unlimited Elements For Elementor...

CVE-2026-103344 WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.20 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Unlimited Elements Unlimited Elements For Elementor Free Widgets, Addons, Templates unlimited-elements-for-elementor allows Reflected XSS.This issue affects Unlimited Elements For Elementor Free...

CVE-2026-103344

The Unlimited Elements For Elementor (Free Widgets, Addons, Templates) WordPress plugin is vulnerable to Reflected Cross-Site Scripting (XSS) due to the improper neutralization of input during web page generation. This vulnerability affects versions from n/a through 2.0.20 . Exploitation details ...

EUVD-2026-92088

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Unlimited Elements Unlimited Elements For Elementor Free Widgets, Addons, Templates unlimited-elements-for-elementor allows Reflected XSS.This issue affects Unlimited Elements For Elementor Free...

cve-2026-7665

CVE-2026-7665 — Unauthenticated Information Disclosure in Essential Addons for Elementor Field| Detail ---|--- CVE ID| CVE-2026-7665 Severity| Medium CVSS Score| 5.3 AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N Affected Plugin| Essential Addons for Elementor Affected Versions| ≤ 6.6.4 Active Installs|...

WordPress The Plus Addons for Elementor <4.1.12 - Cross-Site Scripting

WordPress The Plus Addons for Elementor plugin before 4.1.12 is susceptible to cross-site scripting. The plugin does not properly sanitize some of its fields in the heplusmorepost AJAX action, which is exploitable by both unauthenticated and authenticated users. An attacker can inject arbitrary...

ShortCode Addons - Unauthenticated Options Update

WordPress plugin Shortcode Addons = 3.0.2 contains an unauthenticated arbitrary option update caused by insufficient access controls in the plugin, letting attackers modify options without authentication. id: CVE-2022-34487 info: name: ShortCode Addons - Unauthenticated Options Update author:...

The Plus Addons for Elementor Page Builder < 4.1.7 - Authentication Bypass

The Plus Addons for Elementor plugin before version 4.1.7 allowed attackers to bypass authentication, gain admin access, and create accounts with elevated roles, even when registration was disabled and the Login widget was inactive. id: CVE-2021-24175 info: name: The Plus Addons for Elementor Pag...

Premium Addons for Elementor - Unauthenticated Information Disclosure

Premium Addons for Elementor plugin for WordPress version 4.11.53 and below contains an unauthenticated information disclosure vulnerability.The vulnerability exists due to a missing authorization check in the gettemplatecontent AJAX handler, allowing unauthenticated attackers to retrieve private...

PT-2026-104613

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Unlimited Elements Unlimited Elements For Elementor Free Widgets, Addons, Templates unlimited-elements-for-elementor allows Reflected XSS.This issue affects Unlimited Elements For Elementor Free...

WordPress ShopBuilder – Elementor WooCommerce Builder Addons plugin <= 3.4.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by neurotx in WordPress Plugin ShopBuilder – Elementor WooCommerce Builder Addons versions = 3.4.1...

CVE-2024-31114

CVE-2024-31114 - WordPress Shortcode Addons RCE 익스플로잇 Shortcode Addons = 3.2.5 – 인증된 관리자+ 임의 파일 업로드 CVE ID: CVE-2024-31114 CVSS 점수: 9.1 치명적 🛠️ 취약점 설명 WordPress용 Shortcode Addons – with Visual Composer, Divi, Beaver Builder, and Elementor Extension 플러그인은 3.2.5 이하의 모든 버전 에서 파일 형식 검증 누락 으로 인해 임의 파일...

CVE-2026-103342

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Unlimited Elements Unlimited Elements For Elementor Free Widgets, Addons, Templates unlimited-elements-for-elementor allows Reflected XSS.This issue affects Unlimited Elements For Elementor Free...

CVE-2026-103342

The Unlimited Elements For Elementor (Free Widgets, Addons, Templates) WordPress plugin is vulnerable to Reflected Cross-Site Scripting (XSS) due to the improper neutralization of input during web page generation. This vulnerability affects versions from n/a through 2.0.20 . While the specific ro...

EUVD-2026-92028

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Unlimited Elements Unlimited Elements For Elementor Free Widgets, Addons, Templates unlimited-elements-for-elementor allows Reflected XSS.This issue affects Unlimited Elements For Elementor Free...

CVE-2025-1639

🔓 CVE-2025-1639 익스플로잇 스크립트 📝 설명 WordPress용 Elementor Pro용 Animation Addons 플러그인은 installelementorpluginhandler 함수에 대한 누락된 권한 확인으로 인해 모든 버전최대 1.6 포함에서 승인되지 않은 임의의 플러그인 설치에 취약합니다. 이로 인해 구독자Subscriber 이상의 인증된 공격자가 임의의 플러그인을 설치하고 활성화할 수 있으며, 취약한 사이트에서 Elementor가 활성화되지 않은 경우 피해자를 추가로 감염시키는 데 악용될 수 있습니...

CVE-2023-5360-exploit-with-native-libraries

Royal Elementor Addons ≤ 1.3.78 – 인증되지 않은 임의 파일 업로드 RCE 📌 개요 이 저장소는 WordPress 플러그인 Royal Elementor Addons and Templates 버전 ≤ 1.3.78용 수정된 PoCProof-of-Concept 익스플로잇 을 포함합니다. 이 취약점은 인증되지 않은 임의 파일 업로드 를 허용하며, 이를 악용하여 PHP 파일을 업로드하고 원격 코드 실행RCE을 달성할 수 있습니다. CVE : CVE-2023-5360 취약점 유형 : 인증되지 않은 파일 업로드 →...