Lucene search
K

19 matches found

CNVD
CNVD
added 2025/11/05 12:0 a.m.1 views

WordPress K Elements plugin cross-site scripting vulnerability

WordPress K Elements plugin is an extension to the Elementor page builder that provides preset templates, advanced widgets, and customization features to help users quickly create responsive websites. A cross-site scripting vulnerability exists in WordPress K Elements plugin, which stems from the...

6.5CVSS6.1AI score0.0003EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/11/01 12:4 p.m.4 views

CVE-2025-64362

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in SeventhQueen K Elements k-elements allows DOM-Based XSS.This issue affects K Elements: from n/a through 5.5.0...

6.5CVSS6.4AI score0.0003EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/31 12:30 p.m.2 views

EUVD-2025-37331

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in SeventhQueen K Elements k-elements allows DOM-Based XSS.This issue affects K Elements: from n/a through 5.5.0...

6.5CVSS5.9AI score0.0003EPSS
Exploits0References2
NVD
NVD
added 2025/10/31 12:15 p.m.2 views

CVE-2025-64362

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in SeventhQueen K Elements k-elements allows DOM-Based XSS.This issue affects K Elements: from n/a through 5.5.0...

6.5CVSS0.0003EPSS
Exploits0References1
CVE
CVE
added 2025/10/31 11:42 a.m.6 views

CVE-2025-64362

The CVE-2025-64362 entry maps to a DOM-based Cross-Site Scripting (XSS) in the WordPress plugin K Elements (SeventhQueen K Elements) prior to version 5.5.0. Multiple connected sources describe a flaw arising from improper input handling during web page generation, allowing arbitrary script execut...

6.5CVSS6AI score0.0003EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/10/31 11:42 a.m.1 views

CVE-2025-64362 WordPress K Elements plugin < 5.5.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in SeventhQueen K Elements k-elements allows DOM-Based XSS.This issue affects K Elements: from n/a through 5.5.0...

6.5CVSS6AI score0.0003EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/10/31 11:42 a.m.2 views

CVE-2025-64362 WordPress K Elements plugin < 5.5.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in SeventhQueen K Elements k-elements allows DOM-Based XSS.This issue affects K Elements: from n/a through 5.5.0...

6.5CVSS0.0003EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/10/31 12:0 a.m.1 views

WordPress Plugin K Elements 安全漏洞

WordPress K Elements plugin is an extension to the Elementor page builder that provides preset templates, advanced widgets, and customization features to help users quickly create responsive websites. A cross-site scripting vulnerability exists in WordPress K Elements plugin, which stems from the...

6.5CVSS6AI score0.0003EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/10/31 12:0 a.m.2 views

PT-2025-44613

Name of the Vulnerable Software and Affected Versions SeventhQueen K Elements versions prior to 5.5.0 Description The software contains a flaw related to improper input handling during web page generation, specifically a DOM-Based Cross-Site Scripting XSS issue. This allows for the execution of...

6.5CVSS6AI score0.0003EPSS
Exploits0References5
Patchstack
Patchstack
added 2025/10/30 6:42 a.m.3 views

WordPress K Elements plugin < 5.5.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Plugin K Elements versions 5.5.0...

6.5CVSS5.8AI score0.0003EPSS
Exploits0Affected Software1
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2025-4740

Malicious code in bioql PyPI...

9.8CVSS9.1AI score0.00223EPSS
Exploits0References4
RedhatCVE
RedhatCVE
added 2025/02/20 8:24 p.m.4 views

CVE-2024-56000

Incorrect Privilege Assignment vulnerability in SeventhQueen K Elements k-elements allows Privilege Escalation.This issue affects K Elements: from n/a through 5.4.0...

9.8CVSS7.2AI score0.00223EPSS
Exploits0References1
NVD
NVD
added 2025/02/18 8:15 p.m.8 views

CVE-2024-56000

Incorrect Privilege Assignment vulnerability in SeventhQueen K Elements k-elements allows Privilege Escalation.This issue affects K Elements: from n/a through 5.4.0...

9.8CVSS0.00223EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/02/18 7:54 p.m.13 views

CVE-2024-56000 WordPress K Elements plugin < 5.4.0 - Unauthenticated Account Takeover vulnerability

Incorrect Privilege Assignment vulnerability in SeventhQueen K Elements k-elements allows Privilege Escalation.This issue affects K Elements: from n/a through 5.4.0...

9.8CVSS0.00223EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/02/18 7:54 p.m.6 views

CVE-2024-56000 WordPress K Elements plugin < 5.4.0 - Unauthenticated Account Takeover vulnerability

Incorrect Privilege Assignment vulnerability in SeventhQueen K Elements k-elements allows Privilege Escalation.This issue affects K Elements: from n/a through 5.4.0...

9.8CVSS8.6AI score0.00223EPSS
Exploits0References1
CVE
CVE
added 2025/02/18 7:54 p.m.42 views

CVE-2024-56000

CVE-2024-56000 concerns the K Elements plugin for WordPress. Affected software is K Elements prior to 5.4.0. The connected details identify the root cause as an Authentication Bypass vulnerability that could enable Privilege Escalation. The CVE is listed as Patch Status: Patched, indicating a fix...

9.8CVSS7.2AI score0.00223EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/02/18 12:0 a.m.1 views

WordPress plugin K Elements 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

9.8CVSS8.7AI score0.00223EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2025/02/18 12:0 a.m.2 views

PT-2025-6722 · Unknown · Seventhqueen K Elements

Name of the Vulnerable Software and Affected Versions: SeventhQueen K Elements versions prior to 5.4.0 Description: The issue is related to an Incorrect Privilege Assignment vulnerability, which allows Privilege Escalation. This vulnerability potentially affects over 23,000 sites. It has been...

9.8CVSS9.5AI score0.00223EPSS
Exploits0References14
Patchstack
Patchstack
added 2025/02/17 6:49 a.m.3 views

WordPress K Elements plugin < 5.4.0 - Unauthenticated Account Takeover vulnerability

Unauthenticated Account Takeover vulnerability discovered by Rafie Muhammad Patchstack in WordPress Plugin K Elements versions 5.4.0...

9.8CVSS7AI score0.00223EPSS
Exploits0Affected Software1
Rows per page
Query Builder