CVE-2026-1372

The Tutor LMS Elementor Addons plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 4.0.0 This is due to missing capability checks on the activatetutorfree and activateelementorfree functions registered as adminaction handlers. This makes it possible f...

EUVD-2025-11293

Malicious code in bioql PyPI...

CVE-2025-8564

CVE-2025-8564 — Stored Cross‑Site Scripting in SKT Addons for Elementor (WordPress) up to version 3.7 due to insufficient input sanitization and output escaping on user attributes. Exploitation requires authenticated access at contributor level or higher; attacker can inject scripts that execute ...

CVE-2024-12059

The ElementInvader Addons for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.3.1 via the elioptionvalue shortcode. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract...