78 matches found
CVE-2026-66574
Contributor Cross Site Scripting XSS in Element Pack Elementor Addons = 8.8.3 versions...
EUVD-2026-81495
Contributor Cross Site Scripting XSS in Element Pack Elementor Addons = 8.8.3 versions...
CVE-2026-66574 WordPress Element Pack Elementor Addons plugin <= 8.8.3 - Cross Site Scripting (XSS) vulnerability
Contributor Cross Site Scripting XSS in Element Pack Elementor Addons = 8.8.3 versions...
CVE-2026-66574
CVE-2026-66574 is a Contributor-level Cross-Site Scripting (XSS) vulnerability in the Element Pack Elementor Addons WordPress plugin (by BDThemes), affecting versions 8.8.3 and below . The flaw was discovered by researcher Dthangws and rated CVSS 6.5 (Medium) with a vector of AV:N/AC:L/PR:L/UI:R/...
CVE-2026-66574 WordPress Element Pack Elementor Addons plugin <= 8.8.3 - Cross Site Scripting (XSS) vulnerability
Contributor Cross Site Scripting XSS in Element Pack Elementor Addons = 8.8.3 versions...
WordPress Element Pack Elementor Addons plugin <= 8.8.3 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Dthangws in WordPress Plugin Element Pack Elementor Addons versions = 8.8.3...
CVE-2026-66574: Improper Neutralization of Input During Web Page Generation
Contributor Cross Site Scripting XSS in Element Pack Elementor Addons = 8.8.3 versions...
CVE-2026-65502: Authentication Bypass by Spoofing
Unauthenticated Bypass Vulnerability in Element Pack Elementor Addons = 8.7.13 versions...
CVE-2026-40745: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in bdthemes Element Pack Elementor Addons bdthemes-element-pack-lite allows Blind SQL Injection.This issue affects Element Pack Elementor Addons: from n/a through = 8.4.2...
CVE-2025-31413: Cross-Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in bdthemes Element Pack Elementor Addons bdthemes-element-pack-lite allows Cross Site Request Forgery.This issue affects Element Pack Elementor Addons: from n/a through = 8.3.13...
EUVD-2024-33030
Malicious code in bioql PyPI...
EUVD-2025-12055
Malicious code in bioql PyPI...
EUVD-2024-42419
Malicious code in bioql PyPI...
EUVD-2024-44880
Malicious code in bioql PyPI...
EUVD-2024-37608
Malicious code in bioql PyPI...
EUVD-2024-30571
Malicious code in bioql PyPI...
CVE-2025-8100: Improper Neutralization of Input During Web Page Generation
The Element Pack Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'markercontent' parameter in versions up to, and including, 8.1.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attacker...
WordPress Element Pack Elementor Addons plugin <= 8.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Open Street Map Widget Marker Content vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting via Open Street Map Widget Marker Content vulnerability discovered by zer0gh0st in WordPress Plugin Element Pack Elementor Addons versions = 8.1.5...
CVE-2024-1429
The Element Pack Elementor Addons Header Footer, Free Template Library, Grid, Carousel, Table, Parallax Animation, Register Form, Twitter Grid plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘tablink’ attribute of the Panel Slider widget in all versions up to, and...
CVE-2024-38768
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Webangon The Pack Elementor addons allows PHP Local File Inclusion, Path Traversal.This issue affects The Pack Elementor addons: from n/a through 2.0.8.6...