2075 matches found
CVE-2026-2600-POC
CVE-2026-2600 ElementsKit Elementor Addons $item echo '' . $item'ekittabtitle' . ''; El editor de Elementor sanea la entrada en el lado del cliente, pero el endpoint de la API REST /wp-json/wp/v2/posts/id acepta el campo meta elementordata directamente y omite esa capa por completo. Un Contributo...
WP-CVE-2023-5360
WP-CVE-2023-5360 Royal Elementor Addons and Templates = 1.3.78 – Carga Arbitraria de Archivos sin Autenticación Python 2.7 Comprar Café : Bitcoin $: 14nXhmRiQx5joCXFTdR8ydm3T8et7MFDXC ¿Cómo Usar? Instalar Python 2.7 Descargar Aquí python file.py Ref :...
CVE-2026-103064
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Wpmet ElementsKit Elementor addons Lite elementskit-lite allows Stored XSS.This issue affects ElementsKit Elementor addons Lite: from n/a through 4.0.6...
CVE-2026-103063
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Wpmet ElementsKit Elementor addons Lite elementskit-lite allows Stored XSS.This issue affects ElementsKit Elementor addons Lite: from n/a through 4.0.6...
EUVD-2026-90802
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Wpmet ElementsKit Elementor addons Lite elementskit-lite allows Stored XSS.This issue affects ElementsKit Elementor addons Lite: from n/a through 4.0.6...
CVE-2026-103063 WordPress ElementsKit Elementor addons Lite plugin <= 4.0.6 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Wpmet ElementsKit Elementor addons Lite elementskit-lite allows Stored XSS.This issue affects ElementsKit Elementor addons Lite: from n/a through 4.0.6...
CVE-2026-103063 WordPress ElementsKit Elementor addons Lite plugin <= 4.0.6 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Wpmet ElementsKit Elementor addons Lite elementskit-lite allows Stored XSS.This issue affects ElementsKit Elementor addons Lite: from n/a through 4.0.6...
CVE-2026-103063
The ElementsKit Elementor addons Lite WordPress plugin (versions
WordPress ElementsKit Elementor addons Lite plugin <= 4.0.6 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Intrudify in WordPress Plugin ElementsKit Elementor addons Lite versions = 4.0.6...
CVE-2026-103064
The WordPress ElementsKit Elementor addons Lite plugin (versions ≤ 4.0.6 ) is vulnerable to a Stored Cross-Site Scripting (XSS) flaw. The root cause is the improper neutralization of input during web page generation within the elementskit-lite component. This vulnerability could allow an attacker...
CVE-2026-103064 WordPress ElementsKit Elementor addons Lite plugin <= 4.0.6 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Wpmet ElementsKit Elementor addons Lite elementskit-lite allows Stored XSS.This issue affects ElementsKit Elementor addons Lite: from n/a through 4.0.6...
EUVD-2026-90800
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Wpmet ElementsKit Elementor addons Lite elementskit-lite allows Stored XSS.This issue affects ElementsKit Elementor addons Lite: from n/a through 4.0.6...
CVE-2026-103064 WordPress ElementsKit Elementor addons Lite plugin <= 4.0.6 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Wpmet ElementsKit Elementor addons Lite elementskit-lite allows Stored XSS.This issue affects ElementsKit Elementor addons Lite: from n/a through 4.0.6...
WordPress ElementsKit Elementor addons Lite plugin <= 4.0.6 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by nh4tvd in WordPress Plugin ElementsKit Elementor addons Lite versions = 4.0.6...
CVE-2023-5360
CVE-2023-5360 Exploit de Subida de Archivos en Elementor El plugin de WordPress Royal Elementor Addons and Templates anterior a la versión 1.3.79 no valida correctamente los archivos subidos, lo que podría permitir a usuarios no autenticados subir archivos arbitrarios, como PHP, y lograr RCE. / /...
CVE-2023-5360
CVE-2023-5360 Un EXPLOIT de código abierto para El plugin de WordPress Royal Elementor Addons and Templates anterior a la versión 1.3.79 no valida correctamente los archivos subidos, lo que podría permitir a usuarios no autenticados subir archivos arbitrarios, como PHP, y lograr RCE. Tabla de...
CVE-2023-5360-exploit-with-native-libraries
Royal Elementor Addons ≤ 1.3.78 – Carga Arbitraria de Archivos No Autenticada RCE 📌 Resumen Este repositorio contiene un exploit de prueba de concepto modificado para el plugin de WordPress Royal Elementor Addons and Templates versiones ≤ 1.3.78. La vulnerabilidad permite la carga arbitraria de...
WordPress Royal Elementor Addons Plugin <= 1.3.78 - Arbitrary File Upload
Arbitrary File Upload vulnerability in WordPress Royal Elementor Addons Plugin. This could allow a malicious actor to upload any type of file to your website. This can include backdoors which are then executed to gain further access to your website. This vulnerability has been fixed in version...