EUVD-2024-44008

Malicious code in bioql PyPI...

EUVD-2024-51702

Malicious code in bioql PyPI...

CVE-2024-5418

The DethemeKit For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'slitems' attribute within the plugin's De Product Tab & Slide widget in all versions up to, and including, 2.1.4 due to insufficient input sanitization and output escaping on user supplied...

CVE-2024-4374

The DethemeKit For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's widgets in all versions up to, and including, 2.1.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

CVE-2025-1526

The DethemeKit for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the De Product Display Widget countdown feature in all versions up to, and including, 2.1.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...

CVE-2025-1526

CVE-2025-1526 affects the WordPress plugin DethemeKit for Elementor. It is a Stored Cross‑Site Scripting (Stored XSS) vulnerability in the De Product Display Widget (countdown feature) present in all versions up to and including 2.1.9, caused by insufficient input sanitization and output escaping...

CVE-2025-0661 DethemeKit For Elementor <= 2.1.8 - Authenticated (Contributor+) Protected Post Disclosure

The DethemeKit For Elementor plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 2.36 via the duplicatepost function due to insufficient restrictions on which posts can be duplicated. This makes it possible for authenticated attackers, with...

CVE-2024-13644

The DethemeKit For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's De Gallery widget in all versions up to, and including, 2.1.8 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

CVE-2024-13644

The CVE-2024-13644 entry concerns DethemeKit for Elementor (WordPress). The connected sources confirm a Stored Cross-Site Scripting flaw in the De Gallery widget affecting all versions up to and including 2.1.8, caused by insufficient input sanitization and output escaping on user-supplied attrib...