Lucene search
+L

6 matches found

CVE
CVE
•added 2026/02/14 9:49 a.m.•80 views

CVE-2026-1512

CVE-2026-1512 concerns the WordPress plugin Essential Addons for Elementor – Popular Elementor Templates & Widgets (vulnerable through the Info Box widget). Public sources confirm a stored cross-site scripting vulnerability affecting versions up to 6.5.9, whereby authenticated attackers with cont...

6.4CVSS5.8AI score0.00245EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2026/02/14 9:49 a.m.•13 views

CVE-2026-1512

The Essential Addons for Elementor – Popular Elementor Templates & Widgets plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Info Box widget in all versions up to, and including, 6.5.9 due to insufficient input sanitization and output escaping on user supplied...

6.4CVSS5.7AI score0.00245EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
•added 2026/02/14 9:49 a.m.•12 views

CVE-2026-1512 Essential Addons for Elementor <= 6.5.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Info Box Widget

The Essential Addons for Elementor – Popular Elementor Templates & Widgets plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Info Box widget in all versions up to, and including, 6.5.9 due to insufficient input sanitization and output escaping on user supplied...

6.4CVSS5.7AI score0.00245EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2026/02/14 12:00 a.m.•20 views

PT-2026-8101

The Essential Addons for Elementor – Popular Elementor Templates & Widgets plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Info Box widget in all versions up to, and including, 6.5.9 due to insufficient input sanitization and output escaping on user supplied...

6.4CVSS5.7AI score0.00245EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/14 12:00 a.m.•1 views

CVE-2026-1512: Improper Neutralization of Input During Web Page Generation

The Essential Addons for Elementor – Popular Elementor Templates & Widgets plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Info Box widget in all versions up to, and including, 6.5.9 due to insufficient input sanitization and output escaping on user supplied...

6.4CVSS6AI score0.00245EPSS
SaveExploits1References1
Patchstack
Patchstack
•added 2026/02/13 11:54 p.m.•23 views

WordPress Essential Addons for Elementor plugin <= 6.5.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Info Box Widget vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Info Box Widget vulnerability discovered by knani alaaeddine iwd in WordPress Plugin Essential Addons for Elementor versions = 6.5.9...

6.4CVSS5.4AI score0.00245EPSS
SaveExploits1References1Affected Software1
Rows per page
Query Builder