2726 matches found
CVE-2025-7439 Anber Elementor Addon <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Banner button link
Anber Elementor Addon plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the $anberitem'buttonlink''url'’ parameter in all versions up to, and including, 1.0.1 to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...
CVE-2025-7439
CVE-2025-7439 affects the WordPress plugin “Anber Elementor Addon.” It is vulnerable to a stored cross-site scripting (XSS) condition via the button_link["url"] parameter in versions up to and including 1.0.1. Exploitation requires at least Contributor-level access, and scripts execute when a use...
CVE-2025-7439 Anber Elementor Addon <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Banner button link
Anber Elementor Addon plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the $anberitem'buttonlink''url'’ parameter in all versions up to, and including, 1.0.1 to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...
CVE-2025-7440
CVE-2025-7440 affects the WordPress plugin Anber Elementor Addon , with a Stored Cross-Site Scripting vulnerability in the parameter $item['button_link']['url'] in all versions up to 1.0.1. Exploitation requires authenticated access at Contributor level or higher, and an injected page can execute...
CVE-2025-7440 Anber Elementor Addon <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Carousel button link
The Anber Elementor Addon plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the $item'buttonlink''url' parameter in all versions up to, and including, 1.0.1 to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...
PT-2025-33525 · WordPress · Anber Elementor Addon
Name of the Vulnerable Software and Affected Versions: Anber Elementor Addon versions prior to 1.0.2 Description: The Anber Elementor Addon plugin for WordPress is susceptible to Stored Cross-Site Scripting due to insufficient input sanitization and output escaping. This allows authenticated...
PT-2025-33526 · WordPress · Anber Elementor Addon
Name of the Vulnerable Software and Affected Versions: Anber Elementor Addon versions up to and including 1.0.1 Description: The Anber Elementor Addon plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the $item'button link''url' parameter due to insufficient input sanitization...
CVE-2025-43734
A reflected cross-site scripting XSS vulnerability in the Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.10, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.1 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.16 and 7.4 GA through update 92 allows...
Malicious code in @frozen-ui/link-button (npm)
The package @frozen-ui/link-button was found to contain malicious code...
MAL-2025-18486 Malicious code in discords-button (npm)
The package discords-button was found to contain malicious code...
MAL-2025-9296 Malicious code in @sellerly-kit/button (npm)
The package @sellerly-kit/button was found to contain malicious code...
Malicious code in discords-button (npm)
The package discords-button was found to contain malicious code...
Malicious code in @sellerly-kit/button (npm)
The package @sellerly-kit/button was found to contain malicious code...
Malicious code in @cobalt-marketplace/react-stateful-button (npm)
The package @cobalt-marketplace/react-stateful-button was found to contain malicious code...
MAL-2025-25713 Malicious code in lyft-web-button (npm)
The package lyft-web-button was found to contain malicious code...
MAL-2025-9667 Malicious code in @wisetail/wds-button (npm)
The package @wisetail/wds-button was found to contain malicious code...
MAL-2025-40443 Malicious code in yelp-react-component-button (npm)
The package yelp-react-component-button was found to contain malicious code...
Malicious code in lyft-web-button (npm)
The package lyft-web-button was found to contain malicious code...