Lucene search
+L

311 matches found

Vulnrichment
Vulnrichment
added 2026/04/01 2:37 p.m.7 views

CVE-2025-13535 King Addons for Elementor <= 51.1.38 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Multiple Widgets

The King Addons for Elementor plugin for WordPress is vulnerable to multiple Contributor+ DOM-Based Stored Cross-Site Scripting vulnerabilities in all versions up to, and including, 51.1.38. This is due to insufficient input sanitization and output escaping across multiple widgets and features. T...

6.4CVSS6AI score0.00241EPSS
SaveExploits0References11
Cvelist
Cvelist
added 2026/04/01 2:37 p.m.35 views

CVE-2025-13535 King Addons for Elementor <= 51.1.38 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Multiple Widgets

The King Addons for Elementor plugin for WordPress is vulnerable to multiple Contributor+ DOM-Based Stored Cross-Site Scripting vulnerabilities in all versions up to, and including, 51.1.38. This is due to insufficient input sanitization and output escaping across multiple widgets and features. T...

6.4CVSS0.00241EPSS
SaveExploits0References11
Patchstack
Patchstack
added 2026/04/01 2:35 a.m.16 views

WordPress King Addons for Elementor plugin <= 51.1.38 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Multiple Widgets vulnerability

Authenticated Contributor+ DOM-Based Stored Cross-Site Scripting via Multiple Widgets vulnerability discovered by Webbernaut in WordPress Plugin King Addons for Elementor versions = 51.1.53...

6.4CVSS5.9AI score0.00241EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2026/04/01 12:00 a.m.23 views

WordPress plugin King Addons for Elementor 跨站脚本漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows users to create personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be installed t...

6.4CVSS5.6AI score0.00241EPSS
SaveExploits0References11
RedhatCVE
RedhatCVE
added 2026/03/26 5:03 p.m.12 views

CVE-2026-25371

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in King-Theme Lumise Product Designer lumise allows Blind SQL Injection.This issue affects Lumise Product Designer: from n/a through 2.0.9...

9.3CVSS5.9AI score0.00283EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/03/26 3:13 p.m.11 views

CVE-2025-13997

The King Addons for Elementor – 4,000+ ready Elementor sections, 650+ templates, 70+ FREE widgets for Elementor plugin for WordPress is vulnerable to unauthenticated API key disclosure in all versions up to, and including, 51.1.49 due to the plugin adding the API keys to the HTML source code via...

5.3CVSS5.8AI score0.00219EPSS
SaveExploits0References1
CNVD
CNVD
added 2026/03/26 12:00 a.m.13 views

WordPress Plugin King Addons for Elementor Information Disclosure Vulnerability

WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up a personal blog site on a PHP and MySQL based server.WordPress plugin is an application plugin. An information disclosure vulnerability exists in the WordPress plugin King Addons for Elemento...

5.3CVSS5.7AI score0.00219EPSS
SaveExploits0
EUVD
EUVD
added 2026/03/25 6:31 p.m.15 views

EUVD-2026-15691

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in King-Theme Lumise Product Designer lumise allows Blind SQL Injection.This issue affects Lumise Product Designer: from n/a through 2.0.9...

5.9AI score0.00283EPSS
SaveExploits0References2
NVD
NVD
added 2026/03/25 5:16 p.m.8 views

CVE-2026-25371

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in King-Theme Lumise Product Designer lumise allows Blind SQL Injection.This issue affects Lumise Product Designer: from n/a through 2.0.9...

9.3CVSS0.00283EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2026/03/24 3:19 p.m.18 views

WordPress King Addons for Elementor plugin <= 51.1.49 - Unauthenticated API Keys Disclosure vulnerability

Unauthenticated API Keys Disclosure vulnerability discovered by Ulyses Saicha in WordPress Plugin King Addons for Elementor versions = 51.1.49...

5.3CVSS5.8AI score0.00219EPSS
SaveExploits0References1Affected Software1
EUVD
EUVD
added 2026/03/23 9:30 a.m.18 views

EUVD-2025-208931

The King Addons for Elementor – 4,000+ ready Elementor sections, 650+ templates, 70+ FREE widgets for Elementor plugin for WordPress is vulnerable to unauthenticated API key disclosure in all versions up to, and including, 51.1.49 due to the plugin adding the API keys to the HTML source code via...

5.3CVSS5.8AI score0.00219EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/03/23 6:41 a.m.6 views

CVE-2025-13997

The King Addons for Elementor – 4,000+ ready Elementor sections, 650+ templates, 70+ FREE widgets for Elementor plugin for WordPress is vulnerable to unauthenticated API key disclosure in all versions up to, and including, 51.1.49 due to the plugin adding the API keys to the HTML source code via...

5.3CVSS5.8AI score0.00219EPSS
SaveExploits0References3
CVE
CVE
added 2026/03/23 6:41 a.m.30 views

CVE-2025-13997

The CVE-2025-13997 entry concerns the King Addons for Elementor WordPress plugin. Affected: King Addons for Elementor – 4,000+ ready Elementor sections, 650+ templates, 70+ FREE widgets for Elementor. Root cause: unauthenticated API key disclosure caused by the plugin adding API keys to the HTML ...

5.3CVSS5.8AI score0.00219EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/03/23 6:41 a.m.45 views

CVE-2025-13997 King Addons for Elementor <= 51.1.49 - Unauthenticated API Keys Disclosure

The King Addons for Elementor – 4,000+ ready Elementor sections, 650+ templates, 70+ FREE widgets for Elementor plugin for WordPress is vulnerable to unauthenticated API key disclosure in all versions up to, and including, 51.1.49 due to the plugin adding the API keys to the HTML source code via...

5.3CVSS0.00219EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/03/23 6:41 a.m.7 views

CVE-2025-13997 King Addons for Elementor <= 51.1.49 - Unauthenticated API Keys Disclosure

The King Addons for Elementor – 4,000+ ready Elementor sections, 650+ templates, 70+ FREE widgets for Elementor plugin for WordPress is vulnerable to unauthenticated API key disclosure in all versions up to, and including, 51.1.49 due to the plugin adding the API keys to the HTML source code via...

5.3CVSS5.8AI score0.00219EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/03/23 12:00 a.m.17 views

WordPress plugin King Addons for Elementor 信息泄露漏洞

WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up a personal blog site on a PHP and MySQL based server.WordPress plugin is an application plugin. An information disclosure vulnerability exists in the WordPress plugin King Addons for Elemento...

5.3CVSS5.7AI score0.00219EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/03/06 7:53 a.m.9 views

CVE-2026-28060

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in ThemeREX S.King stephanie-king allows PHP Local File Inclusion.This issue affects S.King: from n/a through = 1.5.3...

8.1CVSS5.8AI score0.00415EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/03/05 6:30 a.m.10 views

EUVD-2026-9720

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in ThemeREX S.King stephanie-king allows PHP Local File Inclusion.This issue affects S.King: from n/a through = 1.5.3...

8.1CVSS5.9AI score0.00415EPSS
SaveExploits0References2
NVD
NVD
added 2026/03/05 6:16 a.m.27 views

CVE-2026-28060

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in ThemeREX S.King stephanie-king allows PHP Local File Inclusion.This issue affects S.King: from n/a through = 1.5.3...

8.1CVSS0.00415EPSS
SaveExploits0References1
CVE
CVE
added 2026/03/05 5:54 a.m.19 views

CVE-2026-28060

CVE-2026-28060 is a Local File Inclusion vulnerability in the WordPress theme “S.King” by ThemeREX (versions

8.1CVSS5.9AI score0.00415EPSS
SaveExploits0References1
Rows per page
Query Builder