CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

NVD•added 2026/05/14 6:16 a.m.•5 views

CVE-2026-5243

6.4CVSS0.00032EPSS

ATTACKERKB•added 2026/05/14 5:30 a.m.•4 views

CVE-2026-5243

Cvelist•added 2026/05/14 5:30 a.m.•28 views

Exploits0References3

CVE-2026-5243 The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce <= 6.4.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via Navigation Menu Lite Widget

6.4CVSS0.00032EPSS

Vulnrichment•added 2026/05/14 5:30 a.m.•5 views

EUVD•added 2026/05/14 5:30 a.m.•4 views

EUVD-2026-30231

CVE•added 2026/05/14 5:30 a.m.•8 views

CVE-2026-5243

CVE-2026-5243 affects The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce plugin for WordPress. The vulnerability is a stored XSS in the Navigation Menu Lite widget’s menu_hover_click parameter present in all versions up to 6.4.11, caused by insuf...

Positive Technologies•added 2026/05/14 12:0 a.m.•5 views

PT-2026-40869

The The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce plugin for WordPress is vulnerable to stored cross-site scripting via the menu hover click parameter of the Navigation Menu Lite widget in all versions up to, and including, 6.4.11 due to...

Github Security Blog•added 2026/04/01 10:4 p.m.•3 views

Exploits0References3

CI4MS: Menu Management (Pages) Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS

Summary Vulnerability: Stored DOM XSS via Pages Added to Menu Persistent Payload Injection - Stored Cross-Site Scripting via Unsafe Rendering of Page Entries in Menu Management Description The application fails to properly sanitize user-controlled input when adding Pages to navigation menus throu...

9.1CVSS6.2AI score0.00018EPSS

Exploits1References4Affected Software1

CNNVD•added 2026/04/01 12:0 a.m.•3 views

CI4MS 跨站脚本漏洞

CI4MS is an open-source blog page management tool developed by Ci4MS. Versions of CI4MS prior to 0.31.0.0 contained a cross-site scripting vulnerability. This vulnerability stemmed from the improper handling of user input when adding articles to the navigation menu via the menu management feature...

9.1CVSS5.7AI score0.0005EPSS

Exploits1References2

Patchstack•added 2026/02/11 9:4 a.m.•5 views

WordPress Master Addons plugin <= 2.0.6.1 - Missing Authorization to Unauthenticated Stored Cross-Site Scripting via Navigation Menu Widget vulnerability

Missing Authorization to Unauthenticated Stored Cross-Site Scripting via Navigation Menu Widget vulnerability discovered by Webbernaut in WordPress Plugin Master Addons for Elementor versions = 2.0.6.1...

7.2CVSS5.5AI score0.01989EPSS

Exploits0References1Affected Software1

EUVD•added 2025/10/03 8:7 p.m.•2 views

EUVD-2024-29947

Malicious code in bioql PyPI...

5.9CVSS6.4AI score0.00143EPSS

OSV•added 2025/01/21 9:9 p.m.•10 views

GHSA-79XX-VF93-P7CX Cross-Site Scripting (XSS) vulnerability in generateNavigation() function in PhpSpreadsheet

Summary The researcher discovered zero-day vulnerability Cross-Site Scripting XSS vulnerability in the code which translates the XLSX file into a HTML representation and displays it in the response. Details When generating the HTML from an xlsx file containing multiple sheets, a navigation menu i...

6.1CVSS6.1AI score0.00706EPSS

Exploits4References4

OSV•added 2024/06/07 1:15 p.m.•0 views

CVE-2024-5542

The Master Addons – Free Widgets, Hover Effects, Toggle, Conditions, Animations for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Navigation Menu widget of the plugin's Mega Menu extension in all versions up to, and including, 2.0.6.1 due to insufficient inpu...

6.1CVSS5.9AI score

ATTACKERKB•added 2024/06/07 1:15 p.m.•1 views

CVE-2024-5542

7.2CVSS6.1AI score0.01989EPSS

Exploits0References3

Vulnrichment•added 2024/04/18 10:23 a.m.•16 views

CVE-2024-32126 WordPress Navigation menu as dropdown Widget plugin <= 1.3.4 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jeroen Peters Navigation menu as Dropdown Widget allows Stored XSS.This issue affects Navigation menu as Dropdown Widget: from n/a through 1.3.4...

5.9CVSS6.7AI score0.00143EPSS

Positive Technologies•added 2024/04/18 12:0 a.m.•2 views

PT-2024-24420 · Unknown · Navigation Menu As Dropdown Widget

Name of the Vulnerable Software and Affected Versions: Navigation menu as Dropdown Widget versions 1.3.4 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for stored cross-site scripting XSS. This means that an attacker can...

5.9CVSS5.9AI score0.00143EPSS

Exploits0References4

Patchstack•added 2024/04/16 6:1 p.m.•3 views

WordPress Navigation menu as dropdown Widget plugin <= 1.3.4 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Joshua Chan Patchstack Alliance in WordPress Plugin Navigation menu as Dropdown Widget versions = 1.3.4...

5.9CVSS6.1AI score0.00143EPSS

Exploits0Affected Software1

OSV•added 2015/11/09 11:59 a.m.•1 views

DEBIAN-CVE-2015-5733

Cross-site scripting XSS vulnerability in the refreshAdvancedAccessibilityOfItem function in wp-admin/js/nav-menu.js in WordPress before 4.2.4 allows remote attackers to inject arbitrary web script or HTML via an accessibility-helper title...

4.3CVSS6AI score0.01502EPSS