Lucene search
+L

6 matches found

RedhatCVE
RedhatCVE
•added 2026/02/04 1:20 p.m.•11 views

CVE-2025-14274

The Unlimited Elements for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Border Hero widget's Button Link field in versions up to 2.0.1. This is due to insufficient input sanitization and output escaping on user-supplied URLs. This makes it possible for...

5.4CVSS5.5AI score0.00176EPSS
SaveExploits0References1
NVD
NVD
•added 2026/02/03 6:15 a.m.•15 views

CVE-2025-14274

The Unlimited Elements for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Border Hero widget's Button Link field in versions up to 2.0.1. This is due to insufficient input sanitization and output escaping on user-supplied URLs. This makes it possible for...

5.4CVSS0.00176EPSS
SaveExploits0References4
attackerkb
attackerkb
•added 2026/02/03 5:30 a.m.•8 views

CVE-2025-14274

The Unlimited Elements for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Border Hero widget's Button Link field in versions up to 2.0.1. This is due to insufficient input sanitization and output escaping on user-supplied URLs. This makes it possible for...

5.4CVSS5.5AI score0.00176EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2026/02/03 5:30 a.m.•43 views

CVE-2025-14274 Unlimited Elements for Elementor <= 2.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Border Hero Widget

The Unlimited Elements for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Border Hero widget's Button Link field in versions up to 2.0.1. This is due to insufficient input sanitization and output escaping on user-supplied URLs. This makes it possible for...

5.4CVSS0.00176EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/03 12:00 a.m.•1 views

CVE-2025-14274: Improper Neutralization of Input During Web Page Generation

The Unlimited Elements for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Border Hero widget's Button Link field in versions up to 2.0.1. This is due to insufficient input sanitization and output escaping on user-supplied URLs. This makes it possible for...

5.4CVSS5.9AI score0.00176EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/02/03 12:00 a.m.•22 views

WordPress plugin Unlimited Elements for Elementor 跨站脚本漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows users to create personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be installed t...

5.4CVSS5.7AI score0.00176EPSS
SaveExploits0References5
Rows per page
Query Builder