Lucene search
+L

15725 matches found

Patchstack
Patchstack
•added 2026/05/22 6:46 a.m.•29 views

WordPress Easy Elements for Elementor – Addons & Website Templates plugin <= 1.4.5 - Unauthenticated Privilege Escalation vulnerability

Unauthenticated Privilege Escalation vulnerability discovered by sorawautsukushiii in WordPress Plugin Easy Elements for Elementor Addons & Website Templates versions = 1.4.5...

8.8CVSS5.8AI score0.00802EPSS
SaveExploits1References1Affected Software1
NVD
NVD
•added 2026/05/22 5:16 a.m.•37 views

CVE-2026-9018

The Easy Elements for Elementor – Addons & Website Templates plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.4.5 via the easyelhandleregister function. This is due to the wpajaxnopriveelregister AJAX handler iterating the attacker-controlled...

8.8CVSS0.00802EPSS
SaveExploits1References5
attackerkb
attackerkb
•added 2026/05/22 4:29 a.m.•26 views

CVE-2026-9018

The Easy Elements for Elementor – Addons & Website Templates plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.4.5 via the easyelhandleregister function. This is due to the wpajaxnopriveelregister AJAX handler iterating the attacker-controlled...

8.8CVSS5.8AI score0.00802EPSS
SaveExploits1References6
Cvelist
Cvelist
•added 2026/05/22 4:29 a.m.•75 views

CVE-2026-9018 Easy Elements for Elementor – Addons & Website Templates <= 1.4.5 - Unauthenticated Privilege Escalation via 'custom_meta' Parameter

The Easy Elements for Elementor – Addons & Website Templates plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.4.5 via the easyelhandleregister function. This is due to the wpajaxnopriveelregister AJAX handler iterating the attacker-controlled...

8.8CVSS0.00802EPSS
SaveExploits1References5
CVE
CVE
•added 2026/05/22 4:29 a.m.•78 views

CVE-2026-9018

The Easy Elements for Elementor – Addons & Website Templates WordPress plugin (≤ 1.4.5) is vulnerable to Privilege Escalation via the easyel_handle_register() flow. The wp_ajax_nopriv_eel_register handler writes attacker-supplied custom_meta to new users via update_user_meta(), with no key whitel...

8.8CVSS5.6AI score0.00802EPSS
SaveExploits1References5
EUVD
EUVD
•added 2026/05/22 4:29 a.m.•29 views

EUVD-2026-31410

The Easy Elements for Elementor – Addons & Website Templates plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.4.5 via the easyelhandleregister function. This is due to the wpajaxnopriveelregister AJAX handler iterating the attacker-controlled...

8.8CVSS5.8AI score0.00802EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/22 12:00 a.m.•9 views

CVE-2026-9018: Improper Privilege Management

The Easy Elements for Elementor – Addons & Website Templates plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.4.5 via the easyelhandleregister function. This is due to the wpajaxnopriveelregister AJAX handler iterating the attacker-controlled...

8.8CVSS5.5AI score0.00802EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2026/05/22 12:00 a.m.•39 views

PT-2026-42729

Name of the Vulnerable Software and Affected Versions Easy Elements for Elementor – Addons & Website Templates versions prior to 1.4.6 Description An issue exists in the easyel handle register function where the wp ajax nopriv eel register AJAX handler processes the custom meta POST array. The...

8.8CVSS5.7AI score0.00802EPSS
SaveExploits1References11
CNNVD
CNNVD
•added 2026/05/22 12:00 a.m.•44 views

WordPress plugin Easy Elements for Elementor 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows users to create personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be installed t...

8.8CVSS5.8AI score0.00802EPSS
SaveExploits1References5
Patchstack
Patchstack
•added 2026/05/21 7:17 p.m.•22 views

WordPress The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce plugin <= 6.4.11 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by theviper17y in WordPress Plugin The Plus Addons for Elementor Page Builder Lite versions = 6.4.11...

5.8AI score
SaveExploits0References1Affected Software1
GithubExploit
GithubExploit
•added 2026/05/21 11:16 a.m.•166 views

Exploit for CVE-2026-4885

CVE-2026-4885 Piotnet Addons for Elementor Pro Note: The...

9.8CVSS5.7AI score0.00869EPSS
SaveExploits2
Patchstack
Patchstack
•added 2026/05/21 7:26 a.m.•25 views

WordPress Piotnet Addons For Elementor Pro plugin <= 7.1.70 - Unauthenticated Arbitrary File Upload vulnerability

Unauthenticated Arbitrary File Upload vulnerability discovered by Wannes Verwimp in WordPress Plugin Piotnet Addons For Elementor Pro versions = 7.1.70...

9.8CVSS5.8AI score0.00869EPSS
SaveExploits2References1Affected Software1
Patchstack
Patchstack
•added 2026/05/21 7:21 a.m.•27 views

WordPress Easy Elements for Elementor – Addons & Website Templates plugin <= 1.4.4 - Unauthenticated Privilege Escalation vulnerability

Unauthenticated Privilege Escalation vulnerability discovered by Ankit Patel in WordPress Plugin Easy Elements for Elementor Addons & Website Templates versions = 1.4.4...

9.8CVSS5.8AI score0.00674EPSS
SaveExploits0References1Affected Software1
NVD
NVD
•added 2026/05/20 1:16 p.m.•23 views

CVE-2026-45443

Missing Authorization vulnerability in ADD-ONS.ORG PDF for Elementor Forms + Drag And Drop Template Builder allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects PDF for Elementor Forms + Drag And Drop Template Builder: from n/a through 5.5.1...

5CVSS0.00254EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/05/20 12:11 p.m.•22 views

CVE-2026-45443 WordPress PDF for Elementor Forms + Drag And Drop Template Builder plugin <= 5.5.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in ADD-ONS.ORG PDF for Elementor Forms + Drag And Drop Template Builder allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects PDF for Elementor Forms + Drag And Drop Template Builder: from n/a through 5.5.1...

5CVSS6AI score0.00254EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/05/20 12:11 p.m.•59 views

CVE-2026-45443 WordPress PDF for Elementor Forms + Drag And Drop Template Builder plugin <= 5.5.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in ADD-ONS.ORG PDF for Elementor Forms + Drag And Drop Template Builder allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects PDF for Elementor Forms + Drag And Drop Template Builder: from n/a through 5.5.1...

5CVSS0.00254EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/05/20 12:11 p.m.•13 views

CVE-2026-45443

Missing Authorization vulnerability in ADD-ONS.ORG PDF for Elementor Forms + Drag And Drop Template Builder allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects PDF for Elementor Forms + Drag And Drop Template Builder: from n/a through 5.5.1...

5CVSS6AI score0.00254EPSS
SaveExploits0References2
CVE
CVE
•added 2026/05/20 12:11 p.m.•40 views

CVE-2026-45443

CVE-2026-45443 affects the WordPress plugin PDF for Elementor Forms + Drag And Drop Template Builder (versions

5CVSS6AI score0.00254EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/05/20 12:11 p.m.•26 views

EUVD-2026-31096

Missing Authorization vulnerability in ADD-ONS.ORG PDF for Elementor Forms + Drag And Drop Template Builder allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects PDF for Elementor Forms + Drag And Drop Template Builder: from n/a through 5.5.1...

5CVSS5.8AI score0.00254EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2026/05/20 12:08 p.m.•28 views

WordPress PDF for Elementor Forms + Drag And Drop Template Builder plugin <= 5.5.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Nguyen Tran Tuan Dung domiee13 in WordPress Plugin PDF for Elementor Forms + Drag And Drop Template Builder versions = 5.5.1...

5CVSS5.8AI score0.00254EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder