9636 matches found
PT-2025-47287
Name of the Vulnerable Software and Affected Versions Element Pack Addons for Elementor plugin for WordPress versions up to and including 8.3.4 Description The Element Pack Addons for Elementor plugin for WordPress is susceptible to Stored Cross-Site Scripting through the Open Street Map widget’s...
PT-2025-47271
Name of the Vulnerable Software and Affected Versions RTMKit Addons for Elementor plugin for WordPress versions up to and including 1.6.1 Description The RTMKit Addons for Elementor plugin for WordPress is susceptible to Stored Cross-Site Scripting. This occurs through insufficient input...
WordPress RTMKit Addons plugin <= 1.6.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Accordion Repeater Block Attribute vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting via Accordion Repeater Block Attribute vulnerability discovered by zer0gh0st in WordPress Plugin RTMKit versions = 1.6.5...
WordPress Case Addons plugin file upload vulnerability
The WordPress Case Addons plugin is a plugin for the Elementor page builder that offers a wide range of functional components and templates for enhancing website design and content presentation. The WordPress Case Addons plugin suffers from a file upload vulnerability that stems from the...
WordPress aThemes Addons for Elementor plugin <= 1.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Call To Action Widget vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting via Call To Action Widget vulnerability discovered by Abu Hurayra HurayraIIT - WPDeveloper in WordPress Plugin aThemes Addons for Elementor versions = 1.1.5...
CVE-2025-12837
The aThemes Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Call To Action widget in versions up to, and including, 1.1.5 due to insufficient input sanitization and output escaping on user-supplied values. This makes it possible for authenticated...
EUVD-2025-38372
The aThemes Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Call To Action widget in versions up to, and including, 1.1.5 due to insufficient input sanitization and output escaping on user-supplied values. This makes it possible for authenticated...
CVE-2025-12837
The CVE-2025-12837 issue affects the aThemes Addons for Elementor plugin for WordPress (versions up to 1.1.5). It is a Stored Cross-Site Scripting vulnerability in the Call To Action widget caused by insufficient input sanitization and output escaping of user-supplied values. Exploitation require...
CVE-2025-12837 aThemes Addons for Elementor <= 1.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Call To Action Widget
The aThemes Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Call To Action widget in versions up to, and including, 1.1.5 due to insufficient input sanitization and output escaping on user-supplied values. This makes it possible for authenticated...
CVE-2025-12837: Improper Neutralization of Input During Web Page Generation
The aThemes Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Call To Action widget in versions up to, and including, 1.1.5 due to insufficient input sanitization and output escaping on user-supplied values. This makes it possible for authenticated...
WordPress plugins, Themes, and Addons for Elementor: Cross-site scripting vulnerabilities
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plug-in. A cross-site scriptin...
CVE-2025-6325
Incorrect Privilege Assignment vulnerability in KingAddons.com King Addons for Elementor king-addons allows Privilege Escalation.This issue affects King Addons for Elementor: from n/a through = 51.1.36...
CVE-2025-6327
Unrestricted Upload of File with Dangerous Type vulnerability in KingAddons.com King Addons for Elementor king-addons allows Upload a Web Shell to a Web Server.This issue affects King Addons for Elementor: from n/a through = 51.1.36...
CVE-2025-62047
Unrestricted Upload of File with Dangerous Type vulnerability in Case-Themes Case Addons case-addons.This issue affects Case Addons: from n/a through 1.3.0...
[SECURITY] Fedora 42 Update: fcitx5-chinese-addons-5.1.10-1.fc42
This provides pinyin and table input method support for fcitx5. Released under LGPL-2.1+. im/pinyin/emoji.txt is derived from Unicode CLDR with modification...
WordPress Elementinvader Addons for Elementor plugin < 1.4.1 – Unauthenticated Arbitrary Email Sending vulnerability
Unauthenticated Arbitrary Email Sending vulnerability discovered by Lucas Montes in WordPress Plugin ElementInvader Addons for Elementor versions 1.4.1...
EUVD-2025-38054
Unrestricted Upload of File with Dangerous Type vulnerability in KingAddons.com King Addons for Elementor king-addons allows Upload a Web Shell to a Web Server.This issue affects King Addons for Elementor: from n/a through = 51.1.36...
EUVD-2025-38052
Incorrect Privilege Assignment vulnerability in KingAddons.com King Addons for Elementor king-addons allows Privilege Escalation.This issue affects King Addons for Elementor: from n/a through = 51.1.36...
