CVE-2023-5360

CVE-2023-5360 استغلال تحميل الملفات في Elementor إن إضافة Royal Elementor Addons and Templates لـ WordPress قبل الإصدار 1.3.79 لا تتحقق بشكل صحيح من الملفات المرفوعة، مما قد يسمح للمستخدمين غير المصادق عليهم برفع ملفات عشوائية، مثل PHP وتحقيق تنفيذ التعليمات البرمجية عن بُعد RCE. root@kitploit: /...

CVE-2026-2600-POC

CVE-2026-2600 ElementsKit Elementor Addons = 3.7.9 — ثغرة تخزين البرمجة النصية عبر المواقع XSS للمستخدمين المصادق عليهم مساهم+...

CVE-2026-83547 Xpro Elementor Addons 1.6.0 - 1.7.3 - Contributor+ Stored XSS via Multiple Widgets

The Xpro Addons WordPress plugin before 1.7.4 does not properly escape some of its widgets' settings before outputting them within HTML attributes, which could allow users with the Contributor role and above to perform Stored Cross-Site Scripting attacks...

CVE-2026-83547

Xpro Addons (WordPress plugin) versions 1.6.0 through 1.7.3 are vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is that certain widget settings are not properly escaped before being rendered within HTML attributes . An attacker with the Contributor role or higher can inject malic...

CVE-2026-83547 Xpro Elementor Addons 1.6.0 - 1.7.3 - Contributor+ Stored XSS via Multiple Widgets

The Xpro Addons WordPress plugin before 1.7.4 does not properly escape some of its widgets' settings before outputting them within HTML attributes, which could allow users with the Contributor role and above to perform Stored Cross-Site Scripting attacks...

CVE-2023-5360

CVE-2023-5360 استغلال مفتوح المصدر لـ الإضافة Royal Elementor Addons and Templates لووردبريس قبل الإصدار 1.3.79 لا تتحقق بشكل صحيح من الملفات المرفوعة، مما قد يسمح للمستخدمين غير الموثوقين برفع ملفات عشوائية مثل PHP وتحقيق تنفيذ الأوامر عن بُعد RCE. جدول المحتويات مقدمة الميزات الاستخدام المتطلبا...

WP-CVE-2023-5360

WP-CVE-2023-5360 Royal Elementor Addons and Templates = 1.3.78 – Неаутентифицированная произвольная загрузка файлов Python 2.7 Купить кофе : Bitcoin $: 14nXhmRiQx5joCXFTdR8ydm3T8et7MFDXC Как использовать? Установите Python 2.7 Скачать python file.py Ссылка:...

WordPress Royal Elementor Addons Plugin <= 1.3.78 - Arbitrary File Upload

Arbitrary File Upload vulnerability in WordPress Royal Elementor Addons Plugin. This could allow a malicious actor to upload any type of file to your website. This can include backdoors which are then executed to gain further access to your website. This vulnerability has been fixed in version...

CVE-2023-5360-exploit-with-native-libraries

Royal Elementor Addons ≤ 1.3.78 – बिना प्रमाणीकरण के मनमाना फ़ाइल अपलोड RCE 📌 अवलोकन इस रिपॉजिटरी में वर्डप्रेस प्लगइन रॉयल एलिमेंटर ऐडऑन्स और टेम्पलेट्स संस्करण ≤ 1.3.78 के लिए एक संशोधित प्रूफ-ऑफ-कॉन्सेप्ट एक्सप्लॉइट है। यह कमजोरी बिना प्रमाणीकरण के मनमाना फ़ाइल अपलोड की अनुमति देती है, जिसका...

CVE-2026-19226

Royal Addons for Elementor (WordPress plugin) versions before 1.7.1066 fail to validate certain Image Accordion Widget effect settings before outputting them inside an HTML attribute , enabling Stored Cross-Site Scripting (XSS) by authenticated users with the Contributor role or higher. The vulne...

CVE-2026-19226 Royal Elementor Addons < 1.7.1066 - Contributor+ Stored XSS via Image Accordion Widget Effect Settings

The Royal Addons for Elementor WordPress plugin before 1.7.1066 does not validate some widget settings before outputting them inside an HTML attribute, which could allow users with the Contributor role and above to perform Stored Cross-Site Scripting attacks...

CVE-2026-13406

CVE-2026-13406 affects the Royal Addons for Elementor WordPress plugin in versions before 1.7.1066 . The root cause is the absence of any capability or nonce check before the plugin returns taxonomy term data for a caller-supplied taxonomy. This allows unauthenticated users to disclose the names ...

CVE-2026-13404

CVE-2026-13404 affects the Royal Addons for Elementor WordPress plugin in versions prior to 1.7.1066 . The vulnerable function wpr_likes_init does not perform any capability or ownership check, relying solely on a publicly-scrapeable nonce before writing like-count and visitor-tracking post meta ...

CVE-2026-13404 Royal Elementor Addons < 1.7.1066 - Unauthenticated Like Count and IP Meta Modification via wpr_likes_init

The Royal Addons for Elementor WordPress plugin before 1.7.1066 does not perform any capability or ownership check relying only on a publicly-scrapeable nonce before writing like-count and visitor-tracking post meta keyed on an arbitrary post ID, allowing unauthenticated users to modify that...

CVE-2026-13406 Royal Elementor Addons < 1.7.1066 - Unauthenticated Taxonomy Term Disclosure

The Royal Addons for Elementor WordPress plugin before 1.7.1066 does not perform any capability or nonce check before returning taxonomy term data for an arbitrary, caller-supplied taxonomy, allowing unauthenticated users to disclose the names and IDs of terms belonging to non-public taxonomies...

CVE-2026-28164

Cross-Site Request Forgery CSRF vulnerability in HashThemes Easy Elementor Addons allows Cross Site Request Forgery. This issue affects Easy Elementor Addons: from n/a through 2.3.7...

CVE-2026-28164

The WordPress plugin Easy Elementor Addons (by HashThemes) versions up to and including 2.3.7 lacks CSRF token validation on its admin AJAX handlers, allowing an attacker to trick an authenticated administrator into executing arbitrary plugin configuration changes. CVSS 3.1 scores this CRITICAL (...

CVE-2026-28164 WordPress Easy Elementor Addons plugin <= 2.3.7 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in HashThemes Easy Elementor Addons allows Cross Site Request Forgery. This issue affects Easy Elementor Addons: from n/a through 2.3.7...

EUVD-2026-63327

Cross-Site Request Forgery CSRF vulnerability in HashThemes Easy Elementor Addons allows Cross Site Request Forgery. This issue affects Easy Elementor Addons: from n/a through 2.3.7...

WordPress Easy Elementor Addons plugin <= 2.3.7 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Asim Alshaya in WordPress Plugin Easy Elementor Addons versions = 2.3.7...