CVE-2025-26745

CVE-2025-26745 : In RS Elements Elementor Addon for WordPress, an Stored XSS exists due to improper neutralization during web page generation. Affected: RS Elements Elementor Addon from n/a through 1.1.5. Root cause and impact are stated; exploitation status is not detailed in the provided docume...

CVE-2025-26745 WordPress RS Elements Elementor Addon plugin <= 1.1.5 - Stored Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in RSTheme RS Elements Elementor Addon rselements-lite allows Stored XSS.This issue affects RS Elements Elementor Addon: from n/a through = 1.1.5...

CVE-2025-26745 WordPress RS Elements Elementor Addon plugin <= 1.1.5 - Stored Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in RSTheme RS Elements Elementor Addon rselements-lite allows Stored XSS.This issue affects RS Elements Elementor Addon: from n/a through = 1.1.5...

CVE-2025-26745: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in RSTheme RS Elements Elementor Addon rselements-lite allows Stored XSS.This issue affects RS Elements Elementor Addon: from n/a through = 1.1.5...

PT-2025-16315

Name of the Vulnerable Software and Affected Versions RSTheme RS Elements Elementor Addon versions 1.1.5 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This enables an attack...

WordPress MemberPress Discord Addon Plugin <= 1.1.1 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by 0xd4rk5id3 in WordPress Plugin MemberPress Discord Addon versions = 1.1.1...

CVE-2025-2563

The User Registration & Membership WordPress plugin before 4.1.2 does not prevent users to set their account role when the Membership Addon is enabled, leading to a privilege escalation issue and allowing unauthenticated users to gain admin privileges...

CVE-2025-2563

The User Registration & Membership WordPress plugin (versions before 4.1.2 ) contains a critical unauthenticated privilege escalation vulnerability (CVE-2025-2563 ). When the Membership Addon is active, the prepare_members_data() function fails to enforce server-side role restrictions. An attacke...

CVE-2025-2563: Undefined Security Weakness

The User Registration & Membership WordPress plugin before 4.1.2 does not prevent users to set their account role when the Membership Addon is enabled, leading to a privilege escalation issue and allowing unauthenticated users to gain admin privileges...

CVE-2025-22871 vulnerabilities

Vulnerabilities for packages: kaf, task, petname, protoc-gen-go, go-licenses, fulcio, crossplane-provider-azure-managedidentity, croc, slsa-verifier, cluster-proportional-autoscaler, helm-push, go-bindata, kubernetes-dashboard-web, kapp, sqlexporter, cert-manager-webhook-pdns,...

GHSA-G9PC-8G42-G6VQ vulnerabilities

Vulnerabilities for packages: kaf, task, petname, protoc-gen-go, go-licenses, fulcio, crossplane-provider-azure-managedidentity, croc, slsa-verifier, cluster-proportional-autoscaler, helm-push, go-bindata, kubernetes-dashboard-web, kapp, sqlexporter, cert-manager-webhook-pdns,...

CVE-2025-22871 vulnerabilities

Vulnerabilities for packages: vault, syft, crane-fips, packer, scorecard, google-osconfig-agent, yunikorn-web, cfssl-fips, hivemind, terraform-provider-kubernetes, nvidia-nsight-compute-13.0, consul, elvish, nri-cassandra, yq, step-kms-plugin-fips, victoriametrics-fips, metrics-server-fips,...

WordPress plugin Ultra Addons Lite for Elementor 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

CVE-2025-31850

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in RedefiningTheWeb PDF Generator Addon for Elementor Page Builder pdf-generator-addon-for-elementor-page-builder allows Stored XSS.This issue affects PDF Generator Addon for Elementor Page Builder:...

CVE-2025-31551 WordPress Salesmate Add-On for Gravity Forms plugin <= 2.0.3 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Salesmate.io Salesmate Add-On for Gravity Forms gf-salesmate-add-on allows SQL Injection.This issue affects Salesmate Add-On for Gravity Forms: from n/a through = 2.0.3...

CVE-2025-31850

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in RedefiningTheWeb PDF Generator Addon for Elementor Page Builder pdf-generator-addon-for-elementor-page-builder allows Stored XSS.This issue affects PDF Generator Addon for Elementor Page Builder:...

CVE-2025-31850 WordPress PDF Generator Addon for Elementor Page Builder plugin <= 2.1.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in RedefiningTheWeb PDF Generator Addon for Elementor Page Builder pdf-generator-addon-for-elementor-page-builder allows Stored XSS.This issue affects PDF Generator Addon for Elementor Page Builder:...

CVE-2025-31850

CVE-2025-31850 : Stored Cross-Site Scripting in PDF Generator Addon for Elementor Page Builder. Affected: PDF Generator Addon for Elementor Page Builder (versions up to 1.7.5; “from n/a through 1.7.5”). Cause: Improper input neutralization during web page generation. Impact: Cross-site script exe...

WordPress plugin PDF Generator Addon for Elementor Page Builder 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting vulnerabili...

CVE-2025-31850: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in RedefiningTheWeb PDF Generator Addon for Elementor Page Builder pdf-generator-addon-for-elementor-page-builder allows Stored XSS.This issue affects PDF Generator Addon for Elementor Page Builder:...