PT-2026-1414

Name of the Vulnerable Software and Affected Versions BuddyPress Xprofile Custom Field Types plugin versions through 1.2.8 Description The BuddyPress Xprofile Custom Field Types plugin for WordPress has a flaw that allows authenticated attackers with Subscriber-level access or higher to delete...

PT-2024-23610 · WordPress · Elementor Imagebox

Name of the Vulnerable Software and Affected Versions: Elementor ImageBox plugin for WordPress versions up to, and including, 1.2.8 Description: The issue is related to Stored Cross-Site Scripting via the image box widget due to insufficient input sanitization and output escaping on user-supplied...