Lucene search
+L

108 matches found

RedhatCVE
RedhatCVE
added 2025/05/23 7:36 a.m.14 views

CVE-2024-4374

The DethemeKit For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's widgets in all versions up to, and including, 2.1.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

6.4CVSS5.8AI score0.00354EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/04/12 9:1 a.m.23 views

CVE-2025-32260

Missing Authorization vulnerability in Detheme DethemeKit For Elementor dethemekit-for-elementor.This issue affects DethemeKit For Elementor: from n/a through = 2.1.10...

5.3CVSS7.2AI score0.0028EPSS
SaveExploits0References1
NVD
NVD
added 2025/04/10 8:15 a.m.23 views

CVE-2025-32260

Missing Authorization vulnerability in Detheme DethemeKit For Elementor dethemekit-for-elementor.This issue affects DethemeKit For Elementor: from n/a through = 2.1.10...

5.3CVSS0.0028EPSS
SaveExploits0References1
CVE
CVE
added 2025/04/10 8:9 a.m.65 views

CVE-2025-32260

CVE-2025-32260 is a Missing Authorization vulnerability in DethemeKit for Elementor. Red Hat’s security tracking lists DethemeKit for Elementor

5.3CVSS7.2AI score0.0028EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/04/10 8:9 a.m.31 views

CVE-2025-32260 WordPress DethemeKit For Elementor plugin <= 2.1.10 - Broken Access Control vulnerability

Missing Authorization vulnerability in Detheme DethemeKit For Elementor dethemekit-for-elementor.This issue affects DethemeKit For Elementor: from n/a through = 2.1.10...

5.3CVSS0.0028EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/04/10 8:9 a.m.9 views

CVE-2025-32260 WordPress DethemeKit For Elementor plugin <= 2.1.10 - Broken Access Control vulnerability

Missing Authorization vulnerability in Detheme DethemeKit For Elementor. This issue affects DethemeKit For Elementor: from n/a through 2.1.10...

5.3CVSS6.9AI score0.0028EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/04/10 12:0 a.m.10 views

PT-2025-15960 · Detheme · Dethemekit For Elementor

Name of the Vulnerable Software and Affected Versions: DethemeKit for Elementor versions n/d through 2.1.10 Description: The issue is related to a lack of authorization in Detheme DethemeKit for Elementor. This problem affects DethemeKit for Elementor from an unspecified start version up to versi...

5.3CVSS6AI score0.0028EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2025/04/10 12:0 a.m.4 views

WordPress plugin DethemeKit For Elementor 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

5.3CVSS6.4AI score0.0028EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2025/04/04 1:39 p.m.18 views

WordPress DethemeKit For Elementor plugin <= 2.1.10 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Mika in WordPress Plugin DethemeKit For Elementor versions = 2.1.10...

5.3CVSS8.3AI score0.0028EPSS
SaveExploits0Affected Software1
RedhatCVE
RedhatCVE
added 2025/03/16 8:19 a.m.20 views

CVE-2025-1526

The DethemeKit for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the De Product Display Widget countdown feature in all versions up to, and including, 2.1.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...

6.4CVSS5.9AI score0.00246EPSS
SaveExploits0References1
OSV
OSV
added 2025/03/14 8:15 a.m.6 views

CVE-2025-1526

The DethemeKit for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the De Product Display Widget countdown feature in all versions up to, and including, 2.1.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...

5.4CVSS5.9AI score0.00246EPSS
SaveExploits0References3
NVD
NVD
added 2025/03/14 8:15 a.m.47 views

CVE-2025-1526

The DethemeKit for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the De Product Display Widget countdown feature in all versions up to, and including, 2.1.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...

6.4CVSS0.00246EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2025/03/14 7:23 a.m.38 views

CVE-2025-1526 DethemeKit for Elementor <= 2.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting

The DethemeKit for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the De Product Display Widget countdown feature in all versions up to, and including, 2.1.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...

6.4CVSS0.00246EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2025/03/14 7:23 a.m.13 views

CVE-2025-1526 DethemeKit for Elementor <= 2.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting

The DethemeKit for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the De Product Display Widget countdown feature in all versions up to, and including, 2.1.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...

6.4CVSS5.8AI score0.00246EPSS
SaveExploits0References3
CVE
CVE
added 2025/03/14 7:23 a.m.82 views

CVE-2025-1526

CVE-2025-1526 affects the WordPress plugin DethemeKit for Elementor. It is a Stored Cross‑Site Scripting (Stored XSS) vulnerability in the De Product Display Widget (countdown feature) present in all versions up to and including 2.1.9, caused by insufficient input sanitization and output escaping...

6.4CVSS5.8AI score0.00246EPSS
SaveExploits0References3Affected Software1
CNNVD
CNNVD
added 2025/03/14 12:0 a.m.8 views

WordPress plugin DethemeKit for Elementor 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site...

6.4CVSS8.2AI score0.00246EPSS
SaveExploits0References5
Patchstack
Patchstack
added 2025/03/13 9:8 p.m.9 views

WordPress DethemeKit for Elementor plugin <= 2.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Webbernaut in WordPress Plugin DethemeKit For Elementor versions = 2.1.9...

6.4CVSS6.8AI score0.00246EPSS
SaveExploits0References1Affected Software1
RedhatCVE
RedhatCVE
added 2025/02/19 12:23 p.m.18 views

CVE-2025-26772

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Detheme DethemeKit For Elementor dethemekit-for-elementor allows Stored XSS.This issue affects DethemeKit For Elementor: from n/a through = 2.1.8...

6.5CVSS7.2AI score0.00235EPSS
SaveExploits0References1
OSV
OSV
added 2025/02/17 12:15 p.m.3 views

CVE-2025-26772

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Detheme DethemeKit For Elementor allows Stored XSS. This issue affects DethemeKit For Elementor: from n/a through 2.1.8...

5.4CVSS5.8AI score0.00235EPSS
SaveExploits0References1
NVD
NVD
added 2025/02/17 12:15 p.m.36 views

CVE-2025-26772

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Detheme DethemeKit For Elementor dethemekit-for-elementor allows Stored XSS.This issue affects DethemeKit For Elementor: from n/a through = 2.1.8...

6.5CVSS0.00235EPSS
SaveExploits0References1
Rows per page
Query Builder