Lucene search
+L

75 matches found

NVD
NVD
•added 2026/10/07 10:17 a.m.•6 views

CVE-2026-105873

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in BdThemes Element Pack Elementor Addons bdthemes-element-pack-lite allows Stored XSS.This issue affects Element Pack Elementor Addons: from n/a through 8.8.6...

6.5CVSS0.00211EPSS
SaveExploits0References1
NVD
NVD
•added 2026/10/07 10:17 a.m.•6 views

CVE-2026-105871

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in BdThemes Element Pack Elementor Addons bdthemes-element-pack-lite allows Stored XSS.This issue affects Element Pack Elementor Addons: from n/a through 8.8.6...

6.5CVSS0.00211EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/07 9:11 a.m.•6 views

CVE-2026-105873

The BdThemes Element Pack Elementor Addons plugin (bdthemes-element-pack-lite ) for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) . This vulnerability, identified as CWE-79 , stems from the improper neutralization of input during web page generation . The issue affects versions thr...

6.5CVSS0.00211EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/07 9:11 a.m.•11 views

CVE-2026-105873 WordPress Element Pack Elementor Addons plugin <= 8.8.6 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in BdThemes Element Pack Elementor Addons bdthemes-element-pack-lite allows Stored XSS.This issue affects Element Pack Elementor Addons: from n/a through 8.8.6...

6.5CVSS0.00211EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/07 9:11 a.m.•4 views

EUVD-2026-94249

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in BdThemes Element Pack Elementor Addons bdthemes-element-pack-lite allows Stored XSS.This issue affects Element Pack Elementor Addons: from n/a through 8.8.6...

6.5CVSS0.00211EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2026/10/07 9:11 a.m.•4 views

WordPress Element Pack Elementor Addons plugin <= 8.8.6 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Intrudify in WordPress Plugin Element Pack Elementor Addons versions = 8.8.6...

6.5CVSS0.00211EPSS
SaveExploits0Affected Software1
Cvelist
Cvelist
•added 2026/10/07 9:04 a.m.•11 views

CVE-2026-105871 WordPress Element Pack Elementor Addons plugin <= 8.8.6 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in BdThemes Element Pack Elementor Addons bdthemes-element-pack-lite allows Stored XSS.This issue affects Element Pack Elementor Addons: from n/a through 8.8.6...

6.5CVSS0.00211EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/07 9:04 a.m.•4 views

EUVD-2026-94247

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in BdThemes Element Pack Elementor Addons bdthemes-element-pack-lite allows Stored XSS.This issue affects Element Pack Elementor Addons: from n/a through 8.8.6...

6.5CVSS0.00211EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/07 9:04 a.m.•7 views

CVE-2026-105871

The BdThemes Element Pack Elementor Addons WordPress plugin (specifically bdthemes-element-pack-lite ) is vulnerable to Stored Cross-Site Scripting (XSS) . This issue affects versions up to and including 8.8.6 due to the improper neutralization of input during web page generation. The vulnerabili...

6.5CVSS0.00211EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2026/10/07 9:03 a.m.•2 views

WordPress Element Pack Elementor Addons plugin <= 8.8.6 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by nh4tvd in WordPress Plugin Element Pack Elementor Addons versions = 8.8.6...

6.5CVSS0.00211EPSS
SaveExploits0Affected Software1
NVD
NVD
•added 2026/09/17 2:17 p.m.•12 views

CVE-2026-66574

Contributor Cross Site Scripting XSS in Element Pack Elementor Addons = 8.8.3 versions...

6.5CVSS0.00224EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/17 1:24 p.m.•12 views

CVE-2026-66574 WordPress Element Pack Elementor Addons plugin <= 8.8.3 - Cross Site Scripting (XSS) vulnerability

Contributor Cross Site Scripting XSS in Element Pack Elementor Addons = 8.8.3 versions...

6.5CVSS5.8AI score0.00224EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/17 1:24 p.m.•14 views

EUVD-2026-81495

Contributor Cross Site Scripting XSS in Element Pack Elementor Addons = 8.8.3 versions...

6.5CVSS5.8AI score0.00224EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/17 1:24 p.m.•39 views

CVE-2026-66574

CVE-2026-66574 is a Contributor-level Cross-Site Scripting (XSS) vulnerability in the Element Pack Elementor Addons WordPress plugin (by BDThemes), affecting versions 8.8.3 and below . The flaw was discovered by researcher Dthangws and rated CVSS 6.5 (Medium) with a vector of AV:N/AC:L/PR:L/UI:R/...

6.5CVSS5.8AI score0.00224EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/17 1:24 p.m.•41 views

CVE-2026-66574 WordPress Element Pack Elementor Addons plugin <= 8.8.3 - Cross Site Scripting (XSS) vulnerability

Contributor Cross Site Scripting XSS in Element Pack Elementor Addons = 8.8.3 versions...

6.5CVSS0.00224EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2026/09/17 11:55 a.m.•15 views

WordPress Element Pack Elementor Addons plugin <= 8.8.3 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Dthangws in WordPress Plugin Element Pack Elementor Addons versions = 8.8.3...

6.5CVSS5.8AI score0.00224EPSS
SaveExploits0Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/17 12:00 a.m.•2 views

CVE-2026-66574: Improper Neutralization of Input During Web Page Generation

Contributor Cross Site Scripting XSS in Element Pack Elementor Addons = 8.8.3 versions...

6.5CVSS5.8AI score0.00224EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/06 12:00 a.m.•2 views

CVE-2026-65502: Authentication Bypass by Spoofing

Unauthenticated Bypass Vulnerability in Element Pack Elementor Addons = 8.7.13 versions...

5.3CVSS5.8AI score0.00329EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/15 12:00 a.m.•7 views

CVE-2026-40745: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in bdthemes Element Pack Elementor Addons bdthemes-element-pack-lite allows Blind SQL Injection.This issue affects Element Pack Elementor Addons: from n/a through = 8.4.2...

7.6CVSS5.8AI score0.00383EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/22 12:00 a.m.•4 views

CVE-2025-31413: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in bdthemes Element Pack Elementor Addons bdthemes-element-pack-lite allows Cross Site Request Forgery.This issue affects Element Pack Elementor Addons: from n/a through = 8.3.13...

4.3CVSS5.8AI score0.00159EPSS
SaveExploits0References1
Rows per page
Query Builder