EUVD-2021-11175

Malware in sbrugna...

EUVD-2021-11116

Malware in sbrugna...

EUVD-2020-29293

Malware in sbrugna...

EUVD-2019-6756

Malware in sbrugna...

EUVD-2021-11179

Malware in sbrugna...

EUVD-2020-6075

Malware in sbrugna...

EUVD-2021-11272

Malware in sbrugna...

EUVD-2020-13193

Malware in sbrugna...

EUVD-2021-11169

Malware in sbrugna...

EUVD-2020-28189

Malware in sbrugna...

EUVD-2021-11072

Malware in sbrugna...

EUVD-2020-7148

Malware in sbrugna...

EUVD-2021-11939

Malware in sbrugna...

WordPress Ultimate Addons for Elementor Lite plugin < 2.5.0 - Author+ Stored XSS vulnerability

Author+ Stored XSS vulnerability discovered by Tony in WordPress Plugin Ultimate Addons for Elementor - Lite versions 2.5.0...

EUVD-2025-32492

The Ultimate Addons for Elementor Formerly Elementor Header & Footer Builder WordPress plugin before 2.5.0 does not sanitize SVG file contents when uploaded through the xmlrpc.php endpoint using base64 encode, leading to a Cross-Site Scripting vulnerability...

CVE-2025-9703

The Ultimate Addons for Elementor Formerly Elementor Header & Footer Builder WordPress plugin before 2.5.0 does not sanitize SVG file contents when uploaded through the xmlrpc.php endpoint using base64 encode, leading to a Cross-Site Scripting vulnerability...

CVE-2025-9703

CVE-2025-9703 describes a Cross-Site Scripting vulnerability in The Ultimate Addons for Elementor (Lite and related) WordPress plugin prior to version 2.5.0. The issue arises because SVG file contents uploaded via the xmlrpc.php endpoint using base64 encoding are not sanitized, allowing injection...

CVE-2025-9703 Ultimate Addons for Elementor Lite < 2.5.0 - Author+ Stored XSS

The Ultimate Addons for Elementor Formerly Elementor Header & Footer Builder WordPress plugin before 2.5.0 does not sanitize SVG file contents when uploaded through the xmlrpc.php endpoint using base64 encode, leading to a Cross-Site Scripting vulnerability...

CVE-2025-9703 Ultimate Addons for Elementor Lite < 2.5.0 - Author+ Stored XSS

The Ultimate Addons for Elementor Formerly Elementor Header & Footer Builder WordPress plugin before 2.5.0 does not sanitize SVG file contents when uploaded through the xmlrpc.php endpoint using base64 encode, leading to a Cross-Site Scripting vulnerability...

PT-2025-40853

Name of the Vulnerable Software and Affected Versions The Ultimate Addons for Elementor Formerly Elementor Header & Footer Builder versions prior to 2.5.0 Description The software does not properly sanitize SVG file contents when uploaded. This occurs when using the xmlrpc.php endpoint with base6...