Lucene search
+L

12776 matches found

Cvelist
Cvelist
added 2025/12/16 8:12 a.m.35 views

CVE-2025-66161 WordPress Grider for Elementor plugin <= 1.0.8 - Broken Access Control vulnerability

Missing Authorization vulnerability in merkulove Grider for Elementor grider-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Grider for Elementor: from n/a through = 1.0.8...

5.4CVSS0.00195EPSS
SaveExploits0References1
CVE
CVE
added 2025/12/16 8:12 a.m.16 views

CVE-2025-66162

CVE-2025-66162 describes a Missing Authorization vulnerability in the WordPress plugin Spoter for Elementor (Spoter-elementor). Affected: Spoter for Elementor versions up to 1.04. Root cause: incorrectly configured access control security levels that can be exploited to bypass authorization. Expl...

5.4CVSS6.6AI score0.00195EPSS
SaveExploits0References1
CVE
CVE
added 2025/12/16 8:12 a.m.15 views

CVE-2025-66147

CVE-2025-66147 is a missing authorization/broken access control vulnerability reported for the WordPress plugin Coder for Elementor (Coder for Elementor:

5.4CVSS6.6AI score0.00195EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/12/16 8:12 a.m.40 views

CVE-2025-64244 WordPress Restrict Elementor Widgets, Columns and Sections plugin <= 1.12 - Broken Access Control vulnerability

Missing Authorization vulnerability in Codexpert, Inc Restrict Elementor Widgets, Columns and Sections restrict-elementor-widgets allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Restrict Elementor Widgets, Columns and Sections: from n/a through = 1.12...

4.3CVSS0.00217EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/12/16 8:12 a.m.5 views

CVE-2025-64244 WordPress Restrict Elementor Widgets, Columns and Sections plugin <= 1.12 - Broken Access Control vulnerability

Missing Authorization vulnerability in Codexpert, Inc Restrict Elementor Widgets, Columns and Sections restrict-elementor-widgets allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Restrict Elementor Widgets, Columns and Sections: from n/a through = 1.12...

4.3CVSS6.6AI score0.00217EPSS
SaveExploits0References1
CVE
CVE
added 2025/12/16 8:12 a.m.13 views

CVE-2025-64244

CVE-2025-64244 : WordPress plugin Restrict Elementor Widgets, Columns and Sections (restrict-elementor-widgets)

4.3CVSS6.6AI score0.00217EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/12/16 6:56 a.m.9 views

CVE-2025-11363

The Royal Addons for Elementor WordPress plugin before 1.7.1037 does not have proper authorisation, allowing unauthenticated users to upload media files via the wpraddonsuploadfile action...

5.3CVSS7AI score0.00281EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2025/12/16 12:53 a.m.11 views

WordPress Elementor plugin <= 3.33.3 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Text Path vulnerability

Authenticated Contributor+ Stored DOM-Based Cross-Site Scripting via Text Path vulnerability discovered by Asaf Mozes in WordPress Plugin Elementor Website Builder versions = 3.33.3...

6.4CVSS5.8AI score0.00227EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2025/12/16 12:00 a.m.10 views

WordPress plugin Spoter for Elementor 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

5.4CVSS6.5AI score0.00195EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/12/16 12:00 a.m.12 views

PT-2025-51472

The Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Text Path widget in all versions up to, and including, 3.33.3 due to insufficient neutralization of user-supplied input used to build SVG markup inside the widget. This makes it possible for...

6.4CVSS5AI score0.00227EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/12/16 12:00 a.m.7 views

WordPress plugin Grider for Elementor 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. A lack of authorization vulnerability exists in the WordPress Grider for Elementor plugin, which can be exploited by an attacker to leverage an incorrectly configured access...

5.4CVSS6.7AI score0.00195EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/12/16 12:00 a.m.7 views

WordPress plugin WPZOOM Addons for Elementor 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

6.5CVSS5.9AI score0.00186EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/12/16 12:00 a.m.9 views

WordPress plugin Modalier for Elementor 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin... A security...

5.4CVSS6.5AI score0.0016EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/12/16 12:00 a.m.17 views

PT-2025-51466

Missing Authorization vulnerability in merkulove Modalier for Elementor modalier-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Modalier for Elementor: from n/a through = 1.0.6...

5.4CVSS7AI score0.0016EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/12/16 12:00 a.m.14 views

PT-2025-51429

Name of the Vulnerable Software and Affected Versions Lottier for Elementor versions through 1.0.9 Description An issue exists in Lottier for Elementor related to incorrectly configured access control security levels, allowing for missing authorization. The issue allows exploitation of access...

5.4CVSS6.5AI score0.00195EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/12/16 12:00 a.m.9 views

WordPress plugin Reformer for Elementor 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

5.4CVSS6.6AI score0.0016EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/12/16 12:00 a.m.11 views

PT-2025-51465

Missing Authorization vulnerability in merkulove Reformer for Elementor reformer-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Reformer for Elementor: from n/a through = 1.0.6...

5.4CVSS7AI score0.0016EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/12/16 12:00 a.m.9 views

PT-2025-51392

Name of the Vulnerable Software and Affected Versions Restrict Elementor Widgets, Columns and Sections versions through 1.12 Description The Restrict Elementor Widgets, Columns and Sections software contains a missing authorization issue. This allows exploitation due to incorrectly configured...

4.3CVSS6.5AI score0.00217EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/12/16 12:00 a.m.6 views

WordPress plugin Coder for Elementor 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to set up personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

5.4CVSS6.5AI score0.00195EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/12/16 12:00 a.m.9 views

WordPress plugin Huger for Elementor 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to set up personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

5.4CVSS6.5AI score0.0016EPSS
SaveExploits0References1
Rows per page
Query Builder