15279 matches found
CVE-2026-66608 WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.19 - Server Side Request Forgery (SSRF) vulnerability
Contributor Server Side Request Forgery SSRF in Unlimited Elements For Elementor Free Widgets, Addons, Templates = 2.0.19 versions...
CVE-2026-66608
A Server-Side Request Forgery (SSRF) vulnerability was identified in the WordPress plugin Unlimited Elements For Elementor (Free Widgets, Addons, Templates) in versions
EUVD-2026-81502
Contributor Server Side Request Forgery SSRF in Unlimited Elements For Elementor Free Widgets, Addons, Templates = 2.0.19 versions...
CVE-2026-66608 WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.19 - Server Side Request Forgery (SSRF) vulnerability
Contributor Server Side Request Forgery SSRF in Unlimited Elements For Elementor Free Widgets, Addons, Templates = 2.0.19 versions...
CVE-2026-66579
JetElements For Elementor is a WordPress plugin affected by a Contributor-level Cross Site Scripting (XSS) vulnerability in versions 2.9.2.1 and below . The flaw was discovered by nh4tvd and is rated CVSS 6.5 (MEDIUM) , with a changed scope and low impact on confidentiality, integrity, and availa...
EUVD-2026-81500
Contributor Cross Site Scripting XSS in JetElements For Elementor = 2.9.2.1 versions...
CVE-2026-66579 WordPress JetElements For Elementor plugin <= 2.9.2.1 - Cross Site Scripting (XSS) vulnerability
Contributor Cross Site Scripting XSS in JetElements For Elementor = 2.9.2.1 versions...
CVE-2026-66579 WordPress JetElements For Elementor plugin <= 2.9.2.1 - Cross Site Scripting (XSS) vulnerability
Contributor Cross Site Scripting XSS in JetElements For Elementor = 2.9.2.1 versions...
CVE-2026-66576 WordPress JetBlocks For Elementor plugin <= 1.5.2 - Cross Site Scripting (XSS) vulnerability
Contributor Cross Site Scripting XSS in JetBlocks For Elementor = 1.5.2 versions...
CVE-2026-66575 WordPress King Addons for Elementor plugin <= 51.1.81 - Insecure Direct Object References (IDOR) vulnerability
Unauthenticated Insecure Direct Object References IDOR in King Addons for Elementor = 51.1.81 versions...
EUVD-2026-81496
Unauthenticated Insecure Direct Object References IDOR in King Addons for Elementor = 51.1.81 versions...
EUVD-2026-81497
Contributor Cross Site Scripting XSS in JetBlocks For Elementor = 1.5.2 versions...
CVE-2026-66575 WordPress King Addons for Elementor plugin <= 51.1.81 - Insecure Direct Object References (IDOR) vulnerability
Unauthenticated Insecure Direct Object References IDOR in King Addons for Elementor = 51.1.81 versions...
CVE-2026-66575
King Addons for Elementor WordPress plugin versions
CVE-2026-66576
CVE-2026-66576 is a Contributor-level Cross Site Scripting (XSS) vulnerability in the JetBlocks For Elementor WordPress plugin, affecting versions 1.5.2 and earlier . The flaw was discovered by nh4tvd (reported via Patchstack). The vulnerability carries a CVSS 3.1 base score of 6.5 (MEDIUM) with ...
CVE-2026-66576 WordPress JetBlocks For Elementor plugin <= 1.5.2 - Cross Site Scripting (XSS) vulnerability
Contributor Cross Site Scripting XSS in JetBlocks For Elementor = 1.5.2 versions...
EUVD-2026-81495
Contributor Cross Site Scripting XSS in Element Pack Elementor Addons = 8.8.3 versions...
CVE-2026-66574 WordPress Element Pack Elementor Addons plugin <= 8.8.3 - Cross Site Scripting (XSS) vulnerability
Contributor Cross Site Scripting XSS in Element Pack Elementor Addons = 8.8.3 versions...
CVE-2026-66574
CVE-2026-66574 is a Contributor-level Cross-Site Scripting (XSS) vulnerability in the Element Pack Elementor Addons WordPress plugin (by BDThemes), affecting versions 8.8.3 and below . The flaw was discovered by researcher Dthangws and rated CVSS 6.5 (Medium) with a vector of AV:N/AC:L/PR:L/UI:R/...