CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

7887 matches found

CVE•added 2025/10/06 6:00 a.m.•32 views

CVE-2025-9703

CVE-2025-9703 describes a Cross-Site Scripting vulnerability in The Ultimate Addons for Elementor (Lite and related) WordPress plugin prior to version 2.5.0. The issue arises because SVG file contents uploaded via the xmlrpc.php endpoint using base64 encoding are not sanitized, allowing injection...

4.3CVSS5.8AI score0.00165EPSS

SaveExploits0References1

Vulnrichment•added 2025/10/06 6:00 a.m.•5 views

CVE-2025-9703 Ultimate Addons for Elementor Lite < 2.5.0 - Author+ Stored XSS

The Ultimate Addons for Elementor Formerly Elementor Header & Footer Builder WordPress plugin before 2.5.0 does not sanitize SVG file contents when uploaded through the xmlrpc.php endpoint using base64 encode, leading to a Cross-Site Scripting vulnerability...

5.8AI score0.00165EPSS

SaveExploits0References1

Cvelist•added 2025/10/06 6:00 a.m.•44 views

CVE-2025-9703 Ultimate Addons for Elementor Lite < 2.5.0 - Author+ Stored XSS

0.00165EPSS

SaveExploits0References1

RedhatCVE•added 2025/10/04 11:53 a.m.•20 views

CVE-2025-9077

The Ultra Addons Lite for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Animated Text' field of the Typeout Widget in version 1.1.9 and below due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

6.4CVSS5.3AI score0.00283EPSS

SaveExploits0References1

Patchstack•added 2025/10/03 9:51 p.m.•11 views

WordPress Ultra Addons Lite for Elementor plugin <= 1.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Animated Text Field vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Animated Text Field vulnerability discovered by zer0gh0st in WordPress Plugin Ultra Addons Lite for Elementor versions = 1.1.9...

6.4CVSS5.8AI score0.00283EPSS

SaveExploits0References1Affected Software1