Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

12745 matches found

Vulnrichment
Vulnrichment•added 2026/02/03 2:8 p.m.•7 views

CVE-2026-25028 WordPress ElementInvader Addons for Elementor plugin <= 1.4.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in Element Invader ElementInvader Addons for Elementor elementinvader-addons-for-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ElementInvader Addons for Elementor: from n/a through = 1.4.1...

5.4CVSS5.3AI score0.00193EPSS
SaveExploits0References1
EUVD
EUVD•added 2026/02/03 2:8 p.m.•7 views

EUVD-2026-5311

Missing Authorization vulnerability in Element Invader ElementInvader Addons for Elementor elementinvader-addons-for-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ElementInvader Addons for Elementor: from n/a through = 1.4.1...

5.3AI score0.00193EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB•added 2026/02/03 2:8 p.m.•11 views

CVE-2026-25028

Missing Authorization vulnerability in Element Invader ElementInvader Addons for Elementor elementinvader-addons-for-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ElementInvader Addons for Elementor: from n/a through = 1.4.1...

5.3AI score0.00193EPSS
SaveExploits0References2
CVE
CVE•added 2026/02/03 2:8 p.m.•33 views

CVE-2026-25028

CVE-2026-25028 affects WordPress plugin ElementInvader Addons for Elementor (versions up to and including 1.4.1). The root cause is missing authorization due to incorrectly configured access control security levels, enabling unauthorized access. Vulnerable component: ElementInvader Addons for Ele...

5.4CVSS5.3AI score0.00193EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB•added 2026/02/03 2:8 p.m.•5 views

CVE-2026-24958

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crocoblock JetElements For Elementor jet-elements allows DOM-Based XSS.This issue affects JetElements For Elementor: from n/a through = 2.7.12.2...

5.3AI score0.00161EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment•added 2026/02/03 2:8 p.m.•5 views

CVE-2026-24958 WordPress JetElements For Elementor plugin <= 2.7.12.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crocoblock JetElements For Elementor jet-elements allows DOM-Based XSS.This issue affects JetElements For Elementor: from n/a through = 2.7.12.2...

5.3AI score0.00161EPSS
SaveExploits0References1
Cvelist
Cvelist•added 2026/02/03 2:8 p.m.•31 views

CVE-2026-24958 WordPress JetElements For Elementor plugin <= 2.7.12.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crocoblock JetElements For Elementor jet-elements allows DOM-Based XSS.This issue affects JetElements For Elementor: from n/a through = 2.7.12.2...

6.5CVSS0.00161EPSS
SaveExploits0References1
CVE
CVE•added 2026/02/03 2:8 p.m.•56 views

CVE-2026-24958

The CVE-2026-24958 entry concerns Crocoblock JetElements For Elementor (WordPress plugin) with a DOM-based XSS caused by improper input neutralization during web page generation. Affected versions are up to and including 2.7.12.2. The incident is confirmed by multiple connected sources (NVD, Red ...

6.5CVSS5.3AI score0.00161EPSS
SaveExploits0References1
EUVD
EUVD•added 2026/02/03 2:8 p.m.•15 views

EUVD-2026-5203

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crocoblock JetElements For Elementor jet-elements allows DOM-Based XSS.This issue affects JetElements For Elementor: from n/a through = 2.7.12.2...

6.5CVSS5.3AI score0.00161EPSS
SaveExploits0References1
Cvelist
Cvelist•added 2026/02/03 2:8 p.m.•33 views

CVE-2026-24947 WordPress LA-Studio Element Kit for Elementor plugin < 1.5.6.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in LA-Studio LA-Studio Element Kit for Elementor lastudio-element-kit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LA-Studio Element Kit for Elementor: from n/a through 1.5.6.3...

4.3CVSS0.00197EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB•added 2026/02/03 2:8 p.m.•5 views

CVE-2026-24947

Missing Authorization vulnerability in LA-Studio LA-Studio Element Kit for Elementor lastudio-element-kit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LA-Studio Element Kit for Elementor: from n/a through 1.5.6.3...

5.3AI score0.00197EPSS
SaveExploits0References2
EUVD
EUVD•added 2026/02/03 2:8 p.m.•19 views

EUVD-2026-5217

Missing Authorization vulnerability in LA-Studio LA-Studio Element Kit for Elementor lastudio-element-kit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LA-Studio Element Kit for Elementor: from n/a through 1.5.6.3...

4.3CVSS5.3AI score0.00197EPSS
SaveExploits0References1
CVE
CVE•added 2026/02/03 2:8 p.m.•21 views

CVE-2026-24947

The CVE-2026-24947 affects WordPress plugin LA-Studio Element Kit for Elementor (LA-Studio Element Kit). Affected versions are prior to 1.5.6.3. The issue is a broken access control due to a missing authorization check, allowing exploitation via insufficient access controls. Remediation is to upg...

4.3CVSS5.3AI score0.00197EPSS
SaveExploits0References1
Patchstack
Patchstack•added 2026/02/03 12:53 p.m.•10 views

WordPress Royal Elementor Kit plugin <= 1.0.116 - Missing Authorization to Arbitrary Transient Update vulnerability

Missing Authorization to Arbitrary Transient Update vulnerability discovered by Sean Murphy in WordPress Theme Royal Elementor Kit versions = 1.0.116...

4.3CVSS5.3AI score0.00533EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack•added 2026/02/03 11:36 a.m.•9 views

WordPress Shortcodes for Elementor plugin <= 1.0.4 - Authenticated (Contributor+) Post Disclosure vulnerability

Authenticated Contributor+ Post Disclosure vulnerability discovered by Francesco Carlucci in WordPress Plugin Shortcodes for Elementor versions = 1.0.4...

4.3CVSS5.3AI score0.00294EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack•added 2026/02/03 11:26 a.m.•13 views

WordPress Tutor LMS Elementor Addons plugin <= 2.1.5 - Missing Authorization to Authenticated (Subscriber+) Limited Plugin Installation vulnerability

Missing Authorization to Authenticated Subscriber+ Limited Plugin Installation vulnerability discovered by Tieu Pham Trong Nhan - TechlabCorp in WordPress Plugin Tutor LMS Elementor Addons versions = 2.1.5...

4.3CVSS5.4AI score0.00304EPSS
SaveExploits0References1Affected Software1
NVD
NVD•added 2026/02/03 7:16 a.m.•8 views

CVE-2026-1210

The Happy Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'elementordata' meta field in all versions up to, and including, 3.20.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

6.4CVSS0.0031EPSS
SaveExploits0References8
Patchstack
Patchstack•added 2026/02/03 6:43 a.m.•13 views

WordPress ElementInvader Addons for Elementor plugin <= 1.3.1 - Missing Authorization to Arbitrary Options Read vulnerability

Missing Authorization to Arbitrary Options Read vulnerability discovered by Francesco Carlucci in WordPress Plugin ElementInvader Addons for Elementor versions = 1.3.1...

4.3CVSS5.4AI score0.003EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment•added 2026/02/03 6:38 a.m.•6 views

CVE-2026-1210 Happy Addons for Elementor <= 3.20.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via '_elementor_data' Meta Field

The Happy Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'elementordata' meta field in all versions up to, and including, 3.20.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

6.4CVSS5.6AI score0.0031EPSS
SaveExploits0References8
ATTACKERKB
ATTACKERKB•added 2026/02/03 6:38 a.m.•5 views

CVE-2026-1210

The Happy Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'elementordata' meta field in all versions up to, and including, 3.20.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

6.4CVSS5.6AI score0.0031EPSS
SaveExploits0References9
Rows per page
Query Builder