WordPress Royal Elementor Addons Plugin <= 1.3.78 - Arbitrary File Upload

Arbitrary File Upload vulnerability in WordPress Royal Elementor Addons Plugin. This could allow a malicious actor to upload any type of file to your website. This can include backdoors which are then executed to gain further access to your website. This vulnerability has been fixed in version...

WP-CVE-2023-5360

WP-CVE-2023-5360 Royal Elementor Addons and Templates = 1.3.78 – Unauthenticated Arbitrary File Upload Python 2.7 Buy Coffee : Bitcoin $: 14nXhmRiQx5joCXFTdR8ydm3T8et7MFDXC How To Use? Install Python 2.7 Download Here python file.py Reff :...

CVE-2023-5360

CVE-2023-5360 Elementor File Upload Exploit The Royal Elementor Addons and Templates WordPress plugin before 1.3.79 does not properly validate uploaded files, which could allow unauthenticated users to upload arbitrary files, such as PHP and achieve RCE. / / | / / / / / | | / / / / / | |/ /// /...

CVE-2023-5360

CVE-2023-5360 An Open-source EXPLOIT for The Royal Elementor Addons and Templates WordPress plugin before 1.3.79 does not properly validate uploaded files, which could allow unauthenticated users to upload arbitrary files, such as PHP and achieve RCE. Table of Contents Introduction Features Usage...

CVE-2023-5360-exploit-with-native-libraries

Royal Elementor Addons ≤ 1.3.78 – Unauthenticated Arbitrary File Upload RCE 📌 Overview This repository contains a modified proof-of-concept exploit for the WordPress plugin Royal Elementor Addons and Templates versions ≤ 1.3.78. The vulnerability allows unauthenticated arbitrary file upload , whi...

CVE-2026-2600-POC

CVE-2026-2600 ElementsKit Elementor Addons $item echo '' . $item'ekittabtitle' . ''; Elementor's editor sanitizes input on the client side, but the REST API endpoint /wp-json/wp/v2/posts/id accepts the elementordata meta field directly and bypasses that layer entirely. An authenticated Contributo...

CVE-2026-118073

Subscriber PHP Object Injection in News Kit Elementor Addons = 1.5.0 versions...

CVE-2026-109891

Missing Authorization vulnerability in weDevs Happy Addons for Elementor happy-elementor-addons allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Happy Addons for Elementor: from n/a through 3.50.1...

CVE-2026-118073 WordPress News Kit Elementor Addons plugin <= 1.5.0 - PHP Object Injection vulnerability

Subscriber PHP Object Injection in News Kit Elementor Addons = 1.5.0 versions...

CVE-2026-118073 WordPress News Kit Elementor Addons plugin <= 1.5.0 - PHP Object Injection vulnerability

Subscriber PHP Object Injection in News Kit Elementor Addons = 1.5.0 versions...

CVE-2026-118073

The News Kit Elementor Addons plugin for WordPress, in versions

EUVD-2026-112990

Subscriber PHP Object Injection in News Kit Elementor Addons = 1.5.0 versions...

CVE-2026-116850

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in weDevs Happy Addons for Elementor happy-elementor-addons allows Stored XSS.This issue affects Happy Addons for Elementor: from n/a through 3.50.1...

EUVD-2026-112875

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in weDevs Happy Addons for Elementor happy-elementor-addons allows Stored XSS.This issue affects Happy Addons for Elementor: from n/a through 3.50.1...

CVE-2026-116850

The Happy Addons for Elementor WordPress plugin (happy-elementor-addons ) is vulnerable to Stored Cross-Site Scripting (XSS) due to improper neutralization of input during web page generation. This vulnerability affects versions 3.50.1 and earlier. While the specific underlying cause or function ...

CVE-2026-116850 WordPress Happy Addons for Elementor plugin <= 3.50.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in weDevs Happy Addons for Elementor happy-elementor-addons allows Stored XSS.This issue affects Happy Addons for Elementor: from n/a through 3.50.1...

PT-2026-132247

Subscriber PHP Object Injection in News Kit Elementor Addons = 1.5.0 versions...

CVE-2026-118073: blazethemes News Kit Elementor Addons: Subscriber PHP Object Injection in News Kit Elementor Addons <= 1.5.0 versions.

Subscriber PHP Object Injection in News Kit Elementor Addons = 1.5.0 versions...

PT-2026-132186

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in weDevs Happy Addons for Elementor happy-elementor-addons allows Stored XSS.This issue affects Happy Addons for Elementor: from n/a through 3.50.1...

CVE-2026-109891: weDevs Happy Addons for Elementor: Missing Authorization vulnerability in weDevs Happy Addons for Elementor happy-elementor-addons allows Exploiting…

Missing Authorization vulnerability in weDevs Happy Addons for Elementor happy-elementor-addons allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Happy Addons for Elementor: from n/a through 3.50.1...