2471 matches found
EUVD-2025-35524
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CrocoBlock JetBlocks For Elementor jet-blocks allows Stored XSS.This issue affects JetBlocks For Elementor: from n/a through = 1.3.18...
CVE-2025-49934
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crocoblock JetBlocks For Elementor jet-blocks allows Stored XSS.This issue affects JetBlocks For Elementor: from n/a through = 1.3.18...
CVE-2025-62019
CVE-2025-62019 concerns a Missing Authorization vulnerability in the WordPress plugin “Recipe Card Blocks for Gutenberg & Elementor” (versions up to and including 3.4.8). The connected documents identify a Broken/Missing Access control issue that could affect how authenticated users interact with...
CVE-2025-49939 WordPress JetElements For Elementor plugin <= 2.7.8 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crocoblock JetElements For Elementor jet-elements allows Stored XSS.This issue affects JetElements For Elementor: from n/a through = 2.7.8...
CVE-2025-49934 WordPress JetBlocks For Elementor plugin <= 1.3.18 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crocoblock JetBlocks For Elementor jet-blocks allows Stored XSS.This issue affects JetBlocks For Elementor: from n/a through = 1.3.18...
WordPress plugin TF Woo Product Grid Addon For Elementor Security Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...
PT-2025-43203
Name of the Vulnerable Software and Affected Versions CrocoBlock JetElements For Elementor versions through 2.7.8 Description A flaw exists in CrocoBlock JetElements For Elementor that allows for Stored Cross-Site Scripting XSS. This issue is due to improper neutralization of input during web pag...
PT-2025-43198
Name of the Vulnerable Software and Affected Versions CrocoBlock JetBlocks For Elementor versions through 1.3.18 Description A flaw exists in CrocoBlock JetBlocks For Elementor that allows for Stored Cross-Site Scripting XSS. This issue involves improper neutralization of input during web page...
CVE-2025-11536
The Element Pack Addons for Elementor plugin for WordPress is vulnerable to Blind Server-Side Request Forgery in all versions up to, and including, 8.2.5 via the wpajaximportelementortemplate action. This makes it possible for authenticated attackers, with Subscriber-level access and above, to ma...
CVE-2025-11536 Element Pack Addons for Elementor <= 8.2.5 - Authenticated (Subscriber+) Blind Server-Side Request Forgery
The Element Pack Addons for Elementor plugin for WordPress is vulnerable to Blind Server-Side Request Forgery in all versions up to, and including, 8.2.5 via the wpajaximportelementortemplate action. This makes it possible for authenticated attackers, with Subscriber-level access and above, to ma...
Exploit for Path Traversal in Elementor Website_Builder
CVE-2025-8081 - Elementor Arbitrary File Read Vulnerability !...
EUVD-2025-33964
The Plus Addons for Elementor WordPress plugin before 6.3.16 does not sanitize SVG file contents, which could allow users with minimum role access as Author to perform Stored Cross-Site Scripting attacks...
CVE-2025-9698
The Plus Addons for Elementor WordPress plugin before 6.3.16 does not sanitize SVG file contents, which could allow users with minimum role access as Author to perform Stored Cross-Site Scripting attacks...
CVE-2025-9698
The Plus Addons for Elementor WordPress plugin is vulnerable to Stored Cross-Site Scripting (XSS) in versions prior to 6.3.16 . The root cause is the failure to properly sanitize SVG file contents , which allows users with Author-level access or higher to execute malicious scripts. To mitigate th...
CVE-2025-9698 The Plus Addons for Elementor < 6.3.16 - Author+ Stored XSS
The Plus Addons for Elementor WordPress plugin before 6.3.16 does not sanitize SVG file contents, which could allow users with minimum role access as Author to perform Stored Cross-Site Scripting attacks...
CVE-2025-9703
The Ultimate Addons for Elementor Formerly Elementor Header & Footer Builder WordPress plugin before 2.5.0 does not sanitize SVG file contents when uploaded through the xmlrpc.php endpoint using base64 encode, leading to a Cross-Site Scripting vulnerability...
EUVD-2021-11115
Malware in sbrugna...
EUVD-2021-11119
Malware in sbrugna...