CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

15723 matches found

Vulnrichment•added 2026/05/29 6:43 a.m.•34 views

CVE-2026-9243 The Plus Addons for Elementor <= 6.4.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'carousel_direction' Parameter

The Plus Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'carouseldirection' parameter of the Carousel Anything widget in versions up to, and including, 6.4.15 This is due to insufficient output escaping in the render function, where the...

6.4CVSS6.1AI score0.00331EPSS

SaveExploits0References4

CVE•added 2026/05/29 6:43 a.m.•83 views

CVE-2026-9243

The Plus Addons for Elementor WordPress plugin contains a Stored Cross-Site Scripting (XSS) flaw in the Carousel Anything widget’s carousel_direction parameter, up to version 6.4.15. The root cause is insufficient output escaping in render(), placing the value into an unquoted dir= attribute, ena...

6.4CVSS6.1AI score0.00331EPSS

SaveExploits0References4

attackerkb•added 2026/05/29 6:43 a.m.•19 views

CVE-2026-9243

6.4CVSS6.1AI score0.00331EPSS

SaveExploits0References5

Cvelist•added 2026/05/29 6:43 a.m.•58 views

CVE-2026-9243 The Plus Addons for Elementor <= 6.4.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'carousel_direction' Parameter

6.4CVSS0.00331EPSS

SaveExploits0References4

EUVD•added 2026/05/29 6:43 a.m.•39 views

EUVD-2026-33254

6.4CVSS6AI score0.00331EPSS

SaveExploits0References4

Positive Technologies•added 2026/05/29 12:00 a.m.•49 views

PT-2026-44759

Name of the Vulnerable Software and Affected Versions The Plus Addons for Elementor versions prior to 6.4.16 Description The plugin is subject to Stored Cross-Site Scripting, a flaw where malicious scripts are permanently stored on the target server. The issue exists in the Carousel Anything widg...

6.4CVSS6.1AI score0.00331EPSS

SaveExploits0References8

Rapid7 Vulnerability Database (full)•added 2026/05/29 12:00 a.m.•3 views

CVE-2026-9243: Improper Neutralization of Input During Web Page Generation

6.4CVSS6AI score0.00331EPSS

SaveExploits0References2

CNNVD•added 2026/05/29 12:00 a.m.•27 views

WordPress plugin Plus Addons for Elementor 跨站脚本漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows users to create personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be installed t...

6.4CVSS5.6AI score0.00331EPSS

SaveExploits0References4

Patchstack•added 2026/05/28 6:38 p.m.•24 views

WordPress The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce plugin <= 6.4.15 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by João Pedro Soares de Alcântara - Kinorth in WordPress Plugin The Plus Addons for Elementor Page Builder Lite versions = 6.4.15...

6.4CVSS5.8AI score0.00331EPSS

SaveExploits0References1Affected Software1

NVD•added 2026/05/27 3:16 p.m.•31 views

CVE-2026-49052

Missing Authorization vulnerability in Wpmet ElementsKit Elementor addons Lite allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects ElementsKit Elementor addons Lite: from n/a through 3.9.6...

4.3CVSS0.00254EPSS

SaveExploits0References1

NVD•added 2026/05/27 3:16 p.m.•43 views

CVE-2026-49053

5.3CVSS0.00313EPSS

SaveExploits0References1

Vulnrichment•added 2026/05/27 2:58 p.m.•20 views

CVE-2026-49053 WordPress ElementsKit Elementor addons Lite plugin <= 3.9.6 - Broken Access Control vulnerability

5.3CVSS6AI score0.00313EPSS

SaveExploits0References1

EUVD•added 2026/05/27 2:58 p.m.•30 views

EUVD-2026-32545

5.3CVSS5.8AI score0.00313EPSS

SaveExploits0References1

Cvelist•added 2026/05/27 2:58 p.m.•91 views

CVE-2026-49053 WordPress ElementsKit Elementor addons Lite plugin <= 3.9.6 - Broken Access Control vulnerability

5.3CVSS0.00313EPSS

SaveExploits0References1

CVE•added 2026/05/27 2:58 p.m.•151 views

CVE-2026-49053

CVE-2026-49053 applies to the WordPress plugin ElementsKit Elementor addons Lite (versions

5.3CVSS6AI score0.00313EPSS

SaveExploits0References1

Patchstack•added 2026/05/27 2:56 p.m.•33 views

WordPress ElementsKit Elementor addons Lite plugin <= 3.9.6 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Bonds in WordPress Plugin ElementsKit Elementor addons Lite versions = 3.9.6...

5.3CVSS5.8AI score0.00313EPSS

SaveExploits0Affected Software1

Cvelist•added 2026/05/27 2:55 p.m.•64 views

CVE-2026-49052 WordPress ElementsKit Elementor addons Lite plugin <= 3.9.6 - Broken Access Control vulnerability

4.3CVSS0.00254EPSS

SaveExploits0References1

Vulnrichment•added 2026/05/27 2:55 p.m.•19 views

CVE-2026-49052 WordPress ElementsKit Elementor addons Lite plugin <= 3.9.6 - Broken Access Control vulnerability

4.3CVSS6AI score0.00254EPSS

SaveExploits0References1

CVE•added 2026/05/27 2:55 p.m.•92 views

CVE-2026-49052

CVE-2026-49052 affects the WordPress ElementsKit Elementor addons Lite plugin up to version 3.9.6. The issue is described as a Missing Authorization/Broken Access Control vulnerability, caused by incorrectly configured access control security levels that potentially allow unauthorized actions wit...

4.3CVSS6AI score0.00254EPSS

SaveExploits0References1

Patchstack•added 2026/05/27 2:55 p.m.•24 views

WordPress ElementsKit Elementor addons Lite plugin <= 3.9.6 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Bonds in WordPress Plugin ElementsKit Elementor addons Lite versions = 3.9.6...

4.3CVSS5.8AI score0.00254EPSS

SaveExploits0Affected Software1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by