14 matches found
CVE-2025-68981
Missing Authorization vulnerability in designthemes HomeFix Elementor Portfolio homefix-ele-portfolio allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects HomeFix Elementor Portfolio: from n/a through = 1.0.1...
EUVD-2025-205754
Missing Authorization vulnerability in designthemes HomeFix Elementor Portfolio homefix-ele-portfolio allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects HomeFix Elementor Portfolio: from n/a through = 1.0.1...
CVE-2025-68981 WordPress HomeFix Elementor Portfolio plugin <= 1.0.1 - Broken Access Control vulnerability
Missing Authorization vulnerability in designthemes HomeFix Elementor Portfolio homefix-ele-portfolio allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects HomeFix Elementor Portfolio: from n/a through = 1.0.1...
CVE-2025-68981 WordPress HomeFix Elementor Portfolio plugin <= 1.0.1 - Broken Access Control vulnerability
Missing Authorization vulnerability in designthemes HomeFix Elementor Portfolio homefix-ele-portfolio allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects HomeFix Elementor Portfolio: from n/a through = 1.0.1...
CVE-2025-68981
CVE-2025-68981 is a Missing Authorization vulnerability in the HomeFix Elementor Portfolio plugin (WordPress). Affected: HomeFix Elementor Portfolio, versions <= 1.0.1. Root cause: incorrectly configured access control/security levels allowing unauthorized actions. According to the CVE record,...
PT-2025-53871
Name of the Vulnerable Software and Affected Versions designthemes HomeFix Elementor Portfolio versions through 1.0.1 Description The software contains a missing authorization issue stemming from incorrectly configured access control security levels. This allows for exploitation of the system...
WordPress HomeFix Elementor Portfolio plugin <= 1.0.1 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Phat RiO - BlueRock in WordPress Plugin HomeFix Elementor Portfolio versions = 1.0.1...
EUVD-2024-46038
Malicious code in bioql PyPI...
CVE-2024-52486
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in SolverWp Elementor Portfolio Builder portfolio-builder-elementor allows DOM-Based XSS.This issue affects Elementor Portfolio Builder: from n/a through = 1.0.0...
CVE-2024-52486
CVE-2024-52486 is a DOM-based XSS in the WordPress plugin Elementor Portfolio Builder (SolverWP) affecting versions up to and including 1.0.0, caused by improper input neutralization during web page generation. Exploitation in the wild and remediation details are not fully specified in the initia...
PT-2024-35327 · Elementor · Elementor Portfolio Builder
Name of the Vulnerable Software and Affected Versions: Elementor Portfolio Builder versions prior to 1.0.0 Description: The issue is related to improper neutralization of input during web page generation, also known as 'Cross-site Scripting', which allows DOM-Based XSS. Recommendations: For...
WordPress plugin Elementor Portfolio Builder 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
WordPress Elementor Portfolio Builder plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Gab Patchstack Alliance in WordPress Plugin Elementor Portfolio Builder versions = 1.0.0...
WordPress Elementor Portfolio Builder Plugin <= 1.0.0 is vulnerable to Cross Site Scripting (XSS)
Software Elementor Portfolio Builder Type Plugin Vulnerable versions = 1.0.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-52486 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID c77f784f7fc3 Credits Gab Required privilege...