Lucene search
+L

15788 matches found

NVD
NVD
•added 2025/12/30 12:15 a.m.•15 views

CVE-2023-32238

Vulnerability in CodexThemes TheGem Elementor, CodexThemes TheGem WPBakery.This issue affects TheGem Elementor: from n/a before 5.8.1.1; TheGem WPBakery: from n/a before 5.8.1.1...

5.4CVSS0.002EPSS
SaveExploits0References1
NVD
NVD
•added 2025/12/30 12:15 a.m.•57 views

CVE-2023-41656

Missing Authorization vulnerability in wpdive Better Elementor Addons allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Better Elementor Addons: from n/a through 1.3.7...

5.4CVSS0.00244EPSS
SaveExploits0References1
CNVD
CNVD
•added 2025/12/30 12:00 a.m.•21 views

WordPress HAPPY plugin missing authorization vulnerability

WordPress HAPPY plugin is a feature extension plugin for Elementor page builder. A lack of authorization vulnerability exists in WordPress HAPPY plugin, which can be exploited by an attacker to cause the exploitation of a misconfigured access control security level...

5.3CVSS5.9AI score0.00222EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/30 12:00 a.m.•9 views

CVE-2025-69092: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPDeveloper Essential Addons for Elementor essential-addons-for-elementor-lite allows DOM-Based XSS.This issue affects Essential Addons for Elementor: from n/a through = 6.5.3...

6.5CVSS5.8AI score0.00154EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/30 12:00 a.m.•7 views

CVE-2023-41656: Missing Authorization

Missing Authorization vulnerability in wpdive Better Elementor Addons allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Better Elementor Addons: from n/a through 1.3.7...

5.4CVSS8.1AI score0.00244EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/30 12:00 a.m.•8 views

CVE-2023-32238: Improper Access Control

Vulnerability in CodexThemes TheGem Elementor, CodexThemes TheGem WPBakery.This issue affects TheGem Elementor: from n/a before 5.8.1.1; TheGem WPBakery: from n/a before 5.8.1.1...

5.4CVSS8.1AI score0.002EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/12/30 12:00 a.m.•13 views

PT-2025-53871

Name of the Vulnerable Software and Affected Versions designthemes HomeFix Elementor Portfolio versions through 1.0.1 Description The software contains a missing authorization issue stemming from incorrectly configured access control security levels. This allows for exploitation of the system...

8.8CVSS6.5AI score0.00254EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2025/12/30 12:00 a.m.•13 views

WordPress plugin HomeFix Elementor Portfolio has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

5.3CVSS5.8AI score0.00254EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/12/30 12:00 a.m.•29 views

PT-2025-53919

Name of the Vulnerable Software and Affected Versions WPDeveloper Essential Addons for Elementor versions through 6.5.3 Description The software contains a flaw related to improper input handling during web page creation, leading to a Cross-site Scripting XSS condition. Specifically, the issue...

6.5CVSS5.8AI score0.00154EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
•added 2025/12/30 12:00 a.m.•20 views

PT-2026-1471

Name of the Vulnerable Software and Affected Versions bdthemes Ultimate Store Kit Elementor Addons versions through 2.9.4 Description The software contains a missing authorization issue related to incorrectly configured access control security levels. This allows for potential exploitation...

4.3CVSS5.8AI score0.00192EPSS
SaveExploits0References8
CNVD
CNVD
•added 2025/12/30 12:00 a.m.•27 views

WordPress Prime Slider - Addons For Elementor plugin server-side request forgery vulnerability

WordPress Prime Slider - Addons For Elementor plugin is a free plugin for Elementor page builder designed to help users easily create various interactive responsive sliders. The WordPress Prime Slider - Addons For Elementor plugin suffers from a server-side request forgery vulnerability, which...

9.1CVSS5.9AI score0.00167EPSS
SaveExploits0References1
CNVD
CNVD
•added 2025/12/30 12:00 a.m.•29 views

WordPress PowerPack Pro for Elementor plugin missing license vulnerability

WordPress PowerPack Pro for Elementor plugin is an Elementor page builder extension plugin designed for the WordPress platform. A lack of authorization vulnerability exists in WordPress PowerPack Pro for Elementor plugin, which can be exploited by an attacker to leverage a misconfigured access...

7.5CVSS6.8AI score0.00287EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/30 12:00 a.m.•6 views

CVE-2025-68981: Missing Authorization

Missing Authorization vulnerability in designthemes HomeFix Elementor Portfolio homefix-ele-portfolio allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects HomeFix Elementor Portfolio: from n/a through = 1.0.1...

5.3CVSS6AI score0.00254EPSS
SaveExploits0References2
CNVD
CNVD
•added 2025/12/30 12:00 a.m.•27 views

WordPress Premium Addons for Elementor Plugin Information Disclosure Vulnerability

WordPress Premium Addons for Elementor Plugin is a premium extension plugin developed for the Elementor page builder designed for WordPress websites. WordPress Premium Addons for Elementor Plugin suffers from an information disclosure vulnerability that stems from the exposure of sensitive system...

7.5CVSS5.8AI score0.00338EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/12/30 12:00 a.m.•22 views

WordPress plugin Essential Addons for Elementor: Cross-site scripting vulnerabilities

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...

6.5CVSS5.7AI score0.00154EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/12/30 12:00 a.m.•62 views

WordPress plugin Better Elementor Addons has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin... A security...

5.4CVSS7.3AI score0.00244EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/12/29 11:22 p.m.•17 views

CVE-2023-41656 WordPress Better Elementor Addons plugin <= 1.3.7 - Broken Access Control vulnerability

Missing Authorization vulnerability in wpdive Better Elementor Addons allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Better Elementor Addons: from n/a through 1.3.7...

5.4CVSS8.1AI score0.00244EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/12/29 11:22 p.m.•70 views

CVE-2023-41656 WordPress Better Elementor Addons plugin <= 1.3.7 - Broken Access Control vulnerability

Missing Authorization vulnerability in wpdive Better Elementor Addons allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Better Elementor Addons: from n/a through 1.3.7...

5.4CVSS0.00244EPSS
SaveExploits0References1
CVE
CVE
•added 2025/12/29 11:18 p.m.•40 views

CVE-2023-32238

CVE-2023-32238 affects CodexThemes TheGem (Elementor) and TheGem (WPBakery). Affected versions: TheGem for Elementor and TheGem for WPBakery prior to 5.8.1.1. Root cause: broken access control / missing authorization leading to elevation of privilege according to Patchstack, with a CVSS v3.1 base...

5.4CVSS8.1AI score0.002EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/12/29 11:18 p.m.•45 views

CVE-2023-32238 WordPress TheGem theme < 5.8.1.1 - Broken Access Control vulnerability

Vulnerability in CodexThemes TheGem Elementor, CodexThemes TheGem WPBakery.This issue affects TheGem Elementor: from n/a before 5.8.1.1; TheGem WPBakery: from n/a before 5.8.1.1...

5.4CVSS0.002EPSS
SaveExploits0References1
Rows per page
Query Builder