WordPress Piotnet Addons For Elementor plugin <= 2.4.36 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by zer0gh0st in WordPress Plugin Piotnet Addons For Elementor versions = 2.4.36...

EUVD-2024-26908

Malicious code in bioql PyPI...

EUVD-2024-31351

Malicious code in bioql PyPI...

EUVD-2024-46712

Malicious code in bioql PyPI...

EUVD-2024-31348

Malicious code in bioql PyPI...

EUVD-2024-32814

Malicious code in bioql PyPI...

EUVD-2024-31350

Malicious code in bioql PyPI...

EUVD-2025-9824

Malicious code in bioql PyPI...

EUVD-2024-44055

Malicious code in bioql PyPI...

EUVD-2025-11806

Malicious code in bioql PyPI...

EUVD-2024-31349

Malicious code in bioql PyPI...

EUVD-2024-46797

Malicious code in bioql PyPI...

EUVD-2025-2733

Malicious code in bioql PyPI...

EUVD-2024-31346

Malicious code in bioql PyPI...

EUVD-2024-31347

Malicious code in bioql PyPI...

CVE-2025-22333

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in piotnetdotcom Piotnet Addons For Elementor piotnet-addons-for-elementor allows Stored XSS.This issue affects Piotnet Addons For Elementor: from n/a through = 2.4.31...

CVE-2024-5502

The Piotnet Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Image Accordion, Dual Heading, and Vertical Timeline widgets in all versions up to, and including, 2.4.30 due to insufficient input sanitization and output escaping on user supplied...

CVE-2024-29934

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Piotnet Piotnet Addons For Elementor allows Stored XSS.This issue affects Piotnet Addons For Elementor: from n/a through 2.4.25...

CVE-2024-5614

The Piotnet Addons For Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.4.29 via the 'pafepostslist' function. This makes it possible for unauthenticated attackers to extract sensitive data including titles and excerpts of...

CVE-2024-10775

The Piotnet Addons For Elementor plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 2.4.32 via the 'pafe-template' shortcode due to insufficient restrictions on which posts can be included. This makes it possible for authenticated attackers, with...