Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

12753 matches found

Patchstack
Patchstack•added 2026/02/03 3:19 p.m.•12 views

WordPress Royal Elementor Addons and Templates plugin <= 1.3.87 - Cross-Site Request Forgery via add_to_compare vulnerability

Cross-Site Request Forgery via addtocompare vulnerability discovered by Francesco Carlucci in WordPress Plugin Royal Elementor Addons versions = 1.3.87...

4.3CVSS5.3AI score0.00244EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack•added 2026/02/03 3:18 p.m.•11 views

WordPress Royal Elementor Addons and Templates plugin <= 1.3.87 - Cross-Site Request Forgery via remove_from_wishlist vulnerability

Cross-Site Request Forgery via removefromwishlist vulnerability discovered by Francesco Carlucci in WordPress Plugin Royal Elementor Addons versions = 1.3.87...

4.3CVSS5.3AI score0.00208EPSS
SaveExploits0References1Affected Software1
NVD
NVD•added 2026/02/03 3:16 p.m.•17 views

CVE-2026-25028

Missing Authorization vulnerability in Element Invader ElementInvader Addons for Elementor elementinvader-addons-for-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ElementInvader Addons for Elementor: from n/a through = 1.4.1...

5.4CVSS0.00193EPSS
SaveExploits0References1
NVD
NVD•added 2026/02/03 3:16 p.m.•17 views

CVE-2026-24958

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crocoblock JetElements For Elementor jet-elements allows DOM-Based XSS.This issue affects JetElements For Elementor: from n/a through = 2.7.12.2...

6.5CVSS0.00161EPSS
SaveExploits0References1
NVD
NVD•added 2026/02/03 3:16 p.m.•31 views

CVE-2026-24947

Missing Authorization vulnerability in LA-Studio LA-Studio Element Kit for Elementor lastudio-element-kit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LA-Studio Element Kit for Elementor: from n/a through 1.5.6.3...

4.3CVSS0.00197EPSS
SaveExploits0References1
Patchstack
Patchstack•added 2026/02/03 3:16 p.m.•11 views

WordPress The Plus Addons for Elementor plugin <= 5.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Webbernaut in WordPress Plugin The Plus Addons for Elementor Page Builder Lite versions = 5.4.2...

6.4CVSS5.3AI score0.00539EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack•added 2026/02/03 3:7 p.m.•9 views

WordPress Jeg Elementor Kit plugin <= 2.6.4 - Authenticated (Contributor+) Cross-Site Scripting via Elementor Widget URL Custom Attributes vulnerability

Authenticated Contributor+ Cross-Site Scripting via Elementor Widget URL Custom Attributes vulnerability discovered by Webbernaut in WordPress Plugin Jeg Elementor Kit versions = 2.6.4...

6.4CVSS5.3AI score0.00399EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist•added 2026/02/03 2:8 p.m.•34 views

CVE-2026-25028 WordPress ElementInvader Addons for Elementor plugin <= 1.4.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in Element Invader ElementInvader Addons for Elementor elementinvader-addons-for-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ElementInvader Addons for Elementor: from n/a through = 1.4.1...

5.4CVSS0.00193EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment•added 2026/02/03 2:8 p.m.•7 views

CVE-2026-25028 WordPress ElementInvader Addons for Elementor plugin <= 1.4.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in Element Invader ElementInvader Addons for Elementor elementinvader-addons-for-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ElementInvader Addons for Elementor: from n/a through = 1.4.1...

5.4CVSS5.3AI score0.00193EPSS
SaveExploits0References1
EUVD
EUVD•added 2026/02/03 2:8 p.m.•7 views

EUVD-2026-5311

Missing Authorization vulnerability in Element Invader ElementInvader Addons for Elementor elementinvader-addons-for-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ElementInvader Addons for Elementor: from n/a through = 1.4.1...

5.3AI score0.00193EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB•added 2026/02/03 2:8 p.m.•11 views

CVE-2026-25028

Missing Authorization vulnerability in Element Invader ElementInvader Addons for Elementor elementinvader-addons-for-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ElementInvader Addons for Elementor: from n/a through = 1.4.1...

5.3AI score0.00193EPSS
SaveExploits0References2
CVE
CVE•added 2026/02/03 2:8 p.m.•33 views

CVE-2026-25028

CVE-2026-25028 affects WordPress plugin ElementInvader Addons for Elementor (versions up to and including 1.4.1). The root cause is missing authorization due to incorrectly configured access control security levels, enabling unauthorized access. Vulnerable component: ElementInvader Addons for Ele...

5.4CVSS5.3AI score0.00193EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB•added 2026/02/03 2:8 p.m.•5 views

CVE-2026-24958

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crocoblock JetElements For Elementor jet-elements allows DOM-Based XSS.This issue affects JetElements For Elementor: from n/a through = 2.7.12.2...

5.3AI score0.00161EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment•added 2026/02/03 2:8 p.m.•5 views

CVE-2026-24958 WordPress JetElements For Elementor plugin <= 2.7.12.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crocoblock JetElements For Elementor jet-elements allows DOM-Based XSS.This issue affects JetElements For Elementor: from n/a through = 2.7.12.2...

5.3AI score0.00161EPSS
SaveExploits0References1
Cvelist
Cvelist•added 2026/02/03 2:8 p.m.•31 views

CVE-2026-24958 WordPress JetElements For Elementor plugin <= 2.7.12.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crocoblock JetElements For Elementor jet-elements allows DOM-Based XSS.This issue affects JetElements For Elementor: from n/a through = 2.7.12.2...

6.5CVSS0.00161EPSS
SaveExploits0References1
CVE
CVE•added 2026/02/03 2:8 p.m.•56 views

CVE-2026-24958

The CVE-2026-24958 entry concerns Crocoblock JetElements For Elementor (WordPress plugin) with a DOM-based XSS caused by improper input neutralization during web page generation. Affected versions are up to and including 2.7.12.2. The incident is confirmed by multiple connected sources (NVD, Red ...

6.5CVSS5.3AI score0.00161EPSS
SaveExploits0References1
EUVD
EUVD•added 2026/02/03 2:8 p.m.•16 views

EUVD-2026-5203

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crocoblock JetElements For Elementor jet-elements allows DOM-Based XSS.This issue affects JetElements For Elementor: from n/a through = 2.7.12.2...

6.5CVSS5.3AI score0.00161EPSS
SaveExploits0References1
Cvelist
Cvelist•added 2026/02/03 2:8 p.m.•33 views

CVE-2026-24947 WordPress LA-Studio Element Kit for Elementor plugin < 1.5.6.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in LA-Studio LA-Studio Element Kit for Elementor lastudio-element-kit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LA-Studio Element Kit for Elementor: from n/a through 1.5.6.3...

4.3CVSS0.00197EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB•added 2026/02/03 2:8 p.m.•5 views

CVE-2026-24947

Missing Authorization vulnerability in LA-Studio LA-Studio Element Kit for Elementor lastudio-element-kit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LA-Studio Element Kit for Elementor: from n/a through 1.5.6.3...

5.3AI score0.00197EPSS
SaveExploits0References2
EUVD
EUVD•added 2026/02/03 2:8 p.m.•19 views

EUVD-2026-5217

Missing Authorization vulnerability in LA-Studio LA-Studio Element Kit for Elementor lastudio-element-kit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LA-Studio Element Kit for Elementor: from n/a through 1.5.6.3...

4.3CVSS5.3AI score0.00197EPSS
SaveExploits0References1
Rows per page
Query Builder