111 matches found
CVE-2026-15156: Improper Neutralization of Input During Web Page Generation
The Essential Addons for Elementor – Popular Elementor Templates & Widgets plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Reading Progress Global Color Settings in all versions up to, and including, 6.6.11 due to insufficient input sanitization and output escaping. This mak...
EUVD-2026-45149
The Royal Addons for Elementor WordPress plugin before 1.7.1063 does not check the post status of menu items or the templates they reference in one of its REST endpoints, allowing unauthenticated users to retrieve the rendered HTML content of private or draft Elementor templates linked from...
CVE-2026-13402
The Royal Addons for Elementor WordPress plugin versions prior to 1.7.1063 is vulnerable to an information disclosure flaw. The plugin fails to verify the post status of menu items or their referenced templates within one of its REST endpoints . This oversight allows unauthenticated users to retr...
CVE-2026-6459: Improper Neutralization of Input During Web Page Generation
The Essential Addons for Elementor – Popular Elementor Templates & Widgets plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Event Calendar widget in all versions up to, and including, 6.6.2 due to insufficient input sanitization and output escaping on event titles sourced...
CVE-2026-7665: Authorization Bypass Through User-Controlled Key
The Essential Addons for Elementor – Popular Elementor Templates & Widgets plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 6.6.4 via the ajaxloadmore function due to insufficient restrictions on which posts can be included. This makes it possible f...
CVE-2026-5193
The Essential Addons for Elementor – Popular Elementor Templates & Widgets plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 6.5.13. This is due to insufficient role validation in the 'registeruser' function, which only blocks the 'administrator' rol...
CVE-2026-1512: Improper Neutralization of Input During Web Page Generation
The Essential Addons for Elementor – Popular Elementor Templates & Widgets plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Info Box widget in all versions up to, and including, 6.5.9 due to insufficient input sanitization and output escaping on user supplied...
WordPress plugin Essential Addons for Elementor – Popular Elementor Templates & Widgets 跨站脚本漏洞
WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows users to create personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be installed t...
WordPress RomethemeKit For Elementor plugin <= 1.5.2 - Authenticated (Contributor+) Sensitive Information Exposure via Elementor Templates vulnerability
Authenticated Contributor+ Sensitive Information Exposure via Elementor Templates vulnerability discovered by Ankit Patel in WordPress Plugin RTMKit versions = 1.5.2...
EUVD-2025-163776
Missing Authorization vulnerability in wpkoithemes WPKoi Templates for Elementor wpkoi-templates-for-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPKoi Templates for Elementor: from n/a through = 3.4.4...
CVE-2025-64274
Missing Authorization vulnerability in wpkoithemes WPKoi Templates for Elementor wpkoi-templates-for-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPKoi Templates for Elementor: from n/a through = 3.4.4...
EUVD-2024-31276
Malicious code in bioql PyPI...
EUVD-2024-45484
Malicious code in bioql PyPI...
EUVD-2024-17284
Malicious code in bioql PyPI...
EUVD-2024-27914
Malicious code in bioql PyPI...
EUVD-2024-35220
Malicious code in bioql PyPI...
EUVD-2024-49429
Malicious code in bioql PyPI...
EUVD-2024-52373
Malicious code in bioql PyPI...