12770 matches found
CVE-2025-9698
The Plus Addons for Elementor WordPress plugin before 6.3.16 does not sanitize SVG file contents, which could allow users with minimum role access as Author to perform Stored Cross-Site Scripting attacks...
CVE-2025-9698
CVE-2025-9698 refers to The Plus Addons for Elementor WordPress plugin. The vulnerability is a Stored Cross-Site Scripting (XSS) caused by unsanitized SVG file contents, exploitable by an Author+ (minimum Author) with SVG content uploaded or processed. Affected versions are before 6.3.16; remedia...
CVE-2025-9698 The Plus Addons for Elementor < 6.3.16 - Author+ Stored XSS
The Plus Addons for Elementor WordPress plugin before 6.3.16 does not sanitize SVG file contents, which could allow users with minimum role access as Author to perform Stored Cross-Site Scripting attacks...
WordPress plugin The Plus Addons for Elementor 安全漏洞
WordPress The Plus Addons for Elementor plugin is a plugin designed specifically for the Elementor page builder, offering over 120 custom widgets and extensions and more than 1000 pre-designed templates. A cross-site scripting vulnerability exists in WordPress The Plus Addons for Elementor plugin...
PT-2025-41756
Name of the Vulnerable Software and Affected Versions Plus Addons for Elementor versions prior to 6.3.16 Description The Plus Addons for Elementor WordPress plugin does not properly sanitize SVG file contents. This could allow users with Author-level access or higher to execute Stored Cross-Site...
WordPress Easy Elementor Addons plugin cross-site scripting vulnerability
The WordPress Elementor Addons plugin is a plugin that extends the Elementor page builder functionality and enhances site design capabilities by providing additional widgets and styles. A cross-site scripting vulnerability exists in the WordPress Easy Elementor Addons plugin, which stems from the...
WordPress TheGem Theme Elements (for Elementor) plugin <= 5.10.5.1 - Local File Inclusion vulnerability
Local File Inclusion vulnerability discovered by an unknown individual in WordPress Plugin TheGem Theme Elements for Elementor versions = 5.10.5.1...
WordPress TheGem (Elementor) theme <= 5.10.5.1 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by ? in WordPress Theme TheGem Elementor versions = 5.10.5.1...
WordPress Masterstudy Elementor Widgets plugin <= 1.2.4 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Rafie Muhammad Patchstack in WordPress Plugin Masterstudy Elementor Widgets versions = 1.2.4...
WordPress Masterstudy Elementor Widgets plugin <= 1.2.4 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Rafie Muhammad Patchstack in WordPress Plugin Masterstudy Elementor Widgets versions = 1.2.4...
CVE-2025-9703
The Ultimate Addons for Elementor Formerly Elementor Header & Footer Builder WordPress plugin before 2.5.0 does not sanitize SVG file contents when uploaded through the xmlrpc.php endpoint using base64 encode, leading to a Cross-Site Scripting vulnerability...
EUVD-2020-28243
Malware in sbrugna...
EUVD-2021-11181
Malware in sbrugna...
EUVD-2021-11118
Malware in sbrugna...
EUVD-2021-11115
Malware in sbrugna...
EUVD-2020-13419
Malware in sbrugna...
EUVD-2021-26481
Malware in sbrugna...
EUVD-2021-26658
Malware in sbrugna...