CVE-2023-3124

CVE-2023-3124 CVE-2023-3124 概念验证 这是针对 CVE-2023-3124 的概念验证（PoC）利用程序，该漏洞存在于 WordPress Elementor Pro 插件中。 描述： WordPress 的 Elementor Pro 插件在版本 3.11.6 及之前版本中，由于对 updatepageoption 函数缺少权限检查，导致存在未授权数据修改漏洞。这使得具有订阅者级别权限的已验证攻击者能够更新任意站点选项，进而可能导致权限提升。 注意： 此高层次概述仅供教育目的。了解漏洞及其影响有助于改进安全实践，并针对类似攻击开发有效的防御措施。...

PT-2026-104585

Name of the Vulnerable Software and Affected Versions Unlimited Elements For Elementor Free Widgets, Addons, Templates versions prior to 2.0.21 Description An issue involving improper neutralization of input during web page generation allows for Reflected Cross-site Scripting XSS, a technique whe...

PT-2026-104523

Name of the Vulnerable Software and Affected Versions Unlimited Elements for Elementor WordPress plugin versions prior to 2.0.21 Description Insufficient sanitization of file paths within uploaded archives allows authenticated users with access to the asset-management feature to write arbitrary...

PT-2026-104481

Name of the Vulnerable Software and Affected Versions Jeg Kit for Elementor versions prior to 3.2.20 Description Stored Cross-Site Scripting occurs due to insufficient input sanitization and output escaping within the comment functionality. This allows unauthenticated attackers to inject arbitrar...

PT-2026-104524

Name of the Vulnerable Software and Affected Versions Unlimited Elements for Elementor WordPress plugin versions prior to 2.0.21 Description An issue exists where search values are not correctly handled before rewriting a prepared SQL statement. This allows unauthenticated users to perform SQL...

PT-2026-104541

Name of the Vulnerable Software and Affected Versions Responsive Plus – Elementor Templates & Starter Sites versions prior to 3.5.4 Description Stored Cross-Site Scripting occurs due to insufficient input sanitization and output escaping within shortcode attributes. Authenticated attackers with...

PT-2026-104532

Name of the Vulnerable Software and Affected Versions Unlimited Elements for Elementor versions prior to 2.0.21 Description Insufficient sanitization and escaping of a parameter used in a SQL statement allows authenticated users to perform blind SQL injection attacks. This flaw enables the...

WordPress Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress plugin <= 3.2.19 - Unauthenticated Stored Cross-Site Scripting vulnerability

Unauthenticated Stored Cross-Site Scripting vulnerability discovered by Dthangws in WordPress Plugin Jeg Kit for Elementor versions = 3.2.19...

Exploit-CVE-2026-18351

Exploit-CVE-2026-18351 Elementor Forms 拖放文件上传 - 未认证任意文件上传导致 RCE。🔥 𝘾𝙤𝙣𝙩𝙖𝙘𝙩: 𝙔𝙤𝙧𝙪 يورو 🔥 https://t.me/ChiefYoru — Channel https://t.me/TeamLeets — Group https://t.me/ChiefYoruPoCs...

WordPress Responsive Starter Templates – Elementor Templates & Starter Sites plugin <= 3.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Wordfence PRISM in WordPress Plugin Responsive Plus versions = 3.5.3...

WordPress Ultra Addons Lite for Elementor plugin <= 1.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Abu Hurayra HurayraIIT in WordPress Plugin Ultra Addons Lite for Elementor versions = 1.3.2...

CVE-2026-32475

CVE-2026-32475 — Elementor Pro ≤ 4.2.1 未认证任意文件上传 → RCE CVE-2026-32475 （CVSS 9.0 严重，CWE-434）的 PoC：Elementor Pro Forms 模块中存在未认证的任意文件上传漏洞，可导致远程代码执行。已在 Elementor Pro 4.2.2 （2026-08-19）中修复。由 Tin Pham TF1T 通过 Patchstack 漏洞赏金计划报告。 ███████╗ █████╗ ██╗ ██╗ ███╗ ███╗ ███████╗ ███████╗ ██████╗ ██╔════╝...

WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.20 - SQL Injection vulnerability

SQL Injection vulnerability discovered by b1ue0cean in WordPress Plugin Unlimited Elements For Elementor Free Widgets, Addons, Templates versions = 2.0.20...

WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.20 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by nh4tvd in WordPress Plugin Unlimited Elements For Elementor Free Widgets, Addons, Templates versions = 2.0.20...

CVE-2026-92924

The Unlimited Elements for Elementor WordPress plugin before 2.0.21 does not check that a request to render widget output comes from a user allowed to make it, allowing users with a role as low as subscriber to have arbitrary WordPress shortcodes executed on the site. Version 2.0.18 removed the...

WordPress Unlimited Elements for Elementor plugin < 2.0.21 - Subscriber+ Arbitrary Shortcode Execution vulnerability

Subscriber+ Arbitrary Shortcode Execution vulnerability discovered by Jakub Herman in WordPress Plugin Unlimited Elements For Elementor Free Widgets, Addons, Templates versions 2.0.21...

CVE-2026-92924

The Unlimited Elements for Elementor WordPress plugin versions prior to 2.0.21 is vulnerable to arbitrary WordPress shortcode execution. The root cause is a lack of authorization checks when rendering widget output, specifically via the get_addon_output_data function. Depending on the version, th...

EUVD-2026-91215

The Unlimited Elements for Elementor WordPress plugin before 2.0.21 does not check that a request to render widget output comes from a user allowed to make it, allowing users with a role as low as subscriber to have arbitrary WordPress shortcodes executed on the site. Version 2.0.18 removed the...

CVE-2026-92924 Unlimited Elements For Elementor < 2.0.21 - Subscriber+ Arbitrary Shortcode Execution via get_addon_output_data

The Unlimited Elements for Elementor WordPress plugin before 2.0.21 does not check that a request to render widget output comes from a user allowed to make it, allowing users with a role as low as subscriber to have arbitrary WordPress shortcodes executed on the site. Version 2.0.18 removed the...

CVE-2026-85016

The Unlimited Elements for Elementor WordPress plugin before 2.0.21 does not escape an icon value before concatenating it into an HTML attribute in its shared widget-parameter processor, allowing users with Contributor access who do not hold unfilteredhtml to store a payload that executes when th...