CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

12833 matches found

CNNVD•added 2025/10/06 12:00 a.m.•8 views

WordPress plugin The Ultimate Addons for Elementor 安全漏洞

WordPress and the WordPress plugin are products of the WordPress Foundation, a blogging platform developed in the PHP language. The platform has the ability to host a personal blog site on a PHP and MySQL based server.WordPress plugin is an application plugin. A security vulnerability exists in t...

4.3CVSS5.8AI score0.00165EPSS

SaveExploits0References1

Patchstack•added 2025/10/04 1:24 p.m.•11 views

WordPress Marquee Addons for Elementor plugin <= 3.8.2 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Michael in WordPress Plugin Marquee Addons for Elementor versions = 3.8.2...

6.1CVSS6.1AI score0.0019EPSS

SaveExploits0Affected Software1

RedhatCVE•added 2025/10/04 11:53 a.m.•20 views

CVE-2025-9045

The Easy Elementor Addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several widget parameters in versions less than, or equal to, 2.2.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-leve...

6.4CVSS6.1AI score0.00318EPSS

SaveExploits0References1

Patchstack•added 2025/10/03 11:13 p.m.•8 views

WordPress X Addons for Elementor plugin <= 1.0.16 - Authenticated (Contributor+) Stored Cross-Site Scripting via Youtube Video ID Field vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Youtube Video ID Field vulnerability discovered by zer0gh0st in WordPress Plugin X Addons for Elementor versions = 1.0.16...

6.4CVSS5.5AI score0.00225EPSS

SaveExploits0References1Affected Software1

Patchstack•added 2025/10/03 10:58 p.m.•11 views

WordPress Easy Elementor Addons plugin <= 2.2.9 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by zer0gh0st in WordPress Plugin Easy Elementor Addons versions = 2.2.9...

6.4CVSS5.8AI score0.00318EPSS

SaveExploits0References1Affected Software1

Patchstack•added 2025/10/03 9:51 p.m.•11 views

WordPress Ultra Addons Lite for Elementor plugin <= 1.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Animated Text Field vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Animated Text Field vulnerability discovered by zer0gh0st in WordPress Plugin Ultra Addons Lite for Elementor versions = 1.1.9...

6.4CVSS5.8AI score0.00283EPSS

SaveExploits0References1Affected Software1