9358 matches found
EUVD-2026-76194
Missing Authorization vulnerability in Pixar Labs Master Addons for Elementor allows Privilege Abuse. This issue affects Master Addons for Elementor: from n/a through 3.2.2...
CVE-2026-62089 WordPress Master Addons for Elementor plugin <= 3.2.2 - Broken Access Control vulnerability
Missing Authorization vulnerability in Pixar Labs Master Addons for Elementor allows Privilege Abuse. This issue affects Master Addons for Elementor: from n/a through 3.2.2...
CVE-2026-62089
CVE-2026-62089 is a Missing Authorization (Broken Access Control) vulnerability in the WordPress plugin Master Addons for Elementor by Pixar Labs, affecting versions from n/a through 3.2.2 . The flaw allows Privilege Abuse , enabling a low-privilege authenticated user to exploit the missing autho...
WordPress Master Addons for Elementor plugin <= 3.2.2 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by TurboNexic in WordPress Plugin Master Addons for Elementor versions = 3.2.2...
EUVD-2026-76211
Editor SQL Injection in Sky Addons for Elementor = 3.8.4 versions...
CVE-2026-62109 WordPress Sky Addons for Elementor plugin <= 3.8.4 - SQL Injection vulnerability
Editor SQL Injection in Sky Addons for Elementor = 3.8.4 versions...
CVE-2026-62109 WordPress Sky Addons for Elementor plugin <= 3.8.4 - SQL Injection vulnerability
Editor SQL Injection in Sky Addons for Elementor = 3.8.4 versions...
CVE-2026-62109
Editor SQL Injection vulnerability in the Sky Addons for Elementor WordPress plugin, affecting versions 3.8.4 and below . Discovered by Ananda Dhakal via Patchstack, the flaw resides in the editor functionality and allows a high-privilege authenticated user to inject SQL, resulting in high confid...
CVE-2026-62105 WordPress ThemeREX Addons plugin < 2.45.0 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in ThemeREX Addons 2.45.0 versions...
CVE-2026-62105
CVE-2026-62105 affects the ThemeREX Addons WordPress plugin in versions prior to 2.45.0 , introducing an unauthenticated PHP Object Injection vulnerability. The flaw is exploitable over the network with low complexity, requires no privileges or user interaction, and is scored CVSS 3.1: 9.8 (Criti...
EUVD-2026-76197
Unauthenticated PHP Object Injection in ThemeREX Addons 2.45.0 versions...
CVE-2026-62105 WordPress ThemeREX Addons plugin < 2.45.0 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in ThemeREX Addons 2.45.0 versions...
WordPress ThemeREX Addons plugin < 2.45.0 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by nh4tvd in WordPress Plugin ThemeREX Addons versions 2.45.0...
WordPress Sky Addons for Elementor plugin <= 3.8.4 - SQL Injection vulnerability
SQL Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Sky Addons for Elementor versions = 3.8.4...
PT-2026-90024
Editor SQL Injection in Sky Addons for Elementor = 3.8.4 versions...
PT-2026-90021
Unauthenticated PHP Object Injection in ThemeREX Addons 2.45.0 versions...
CVE-2026-62109: Improper Neutralization of Special Elements used in an SQL Command
Editor SQL Injection in Sky Addons for Elementor = 3.8.4 versions...
CVE-2026-62089: Missing Authorization
Missing Authorization vulnerability in Pixar Labs Master Addons for Elementor allows Privilege Abuse. This issue affects Master Addons for Elementor: from n/a through 3.2.2...
PT-2026-90018
Missing Authorization vulnerability in Pixar Labs Master Addons for Elementor allows Privilege Abuse. This issue affects Master Addons for Elementor: from n/a through 3.2.2...