CVE-2026-39778

Unauthenticated Cross Site Scripting XSS in Ansar Import – One Click Starter Sites – for Elementor & Themes = 2.1.2 versions...

EUVD-2026-93027

Unauthenticated Cross Site Scripting XSS in Ansar Import – One Click Starter Sites – for Elementor & Themes = 2.1.2 versions...

CVE-2026-39778 WordPress Ansar Import – One Click Starter Sites – for Elementor & Themes plugin <= 2.1.2 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Ansar Import – One Click Starter Sites – for Elementor & Themes = 2.1.2 versions...

CVE-2026-39778

The Ansar Import – One Click Starter Sites – for Elementor & Themes WordPress plugin, version

CVE-2026-39778 WordPress Ansar Import – One Click Starter Sites – for Elementor & Themes plugin <= 2.1.2 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Ansar Import – One Click Starter Sites – for Elementor & Themes = 2.1.2 versions...

PT-2026-106449

Unauthenticated Cross Site Scripting XSS in Ansar Import – One Click Starter Sites – for Elementor & Themes = 2.1.2 versions...

CVE-2026-39778: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in Ansar Import – One Click Starter Sites – for Elementor & Themes = 2.1.2 versions...

WordPress Ansar Import – One Click Starter Sites – for Elementor & Themes plugin <= 2.1.2 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by K. Sorrachat in WordPress Plugin Ansar Import – One Click Starter Sites – for Elementor & Themes versions = 2.1.2...

CVE-2026-15795

The Responsive Plus – Elementor Templates & Starter Sites plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Shortcode Attributes in all versions up to, and including, 3.5.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...

CVE-2026-15795 Responsive Plus <= 3.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes

The Responsive Plus – Elementor Templates & Starter Sites plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Shortcode Attributes in all versions up to, and including, 3.5.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...

CVE-2026-15795 Responsive Plus <= 3.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes

The Responsive Plus – Elementor Templates & Starter Sites plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Shortcode Attributes in all versions up to, and including, 3.5.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...

CVE-2026-15795

The Responsive Plus – Elementor Templates & Starter Sites plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 3.5.3 . The root cause is insufficient input sanitization and output escaping within Shortcode Attributes . This flaw allows authen...

EUVD-2026-91953

The Responsive Plus – Elementor Templates & Starter Sites plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Shortcode Attributes in all versions up to, and including, 3.5.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...

PT-2026-104541

Name of the Vulnerable Software and Affected Versions Responsive Plus – Elementor Templates & Starter Sites versions prior to 3.5.4 Description Stored Cross-Site Scripting occurs due to insufficient input sanitization and output escaping within shortcode attributes. Authenticated attackers with...

CVE-2026-15795: Improper Neutralization of Input During Web Page Generation

The Responsive Plus – Elementor Templates & Starter Sites plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Shortcode Attributes in all versions up to, and including, 3.5.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...

WordPress Responsive Starter Templates – Elementor Templates & Starter Sites plugin <= 3.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Wordfence PRISM in WordPress Plugin Responsive Plus versions = 3.5.3...

EUVD-2024-40785

Malicious code in bioql PyPI...

EUVD-2024-47886

Malicious code in bioql PyPI...

EUVD-2024-49169

Malicious code in bioql PyPI...

CVE-2024-8430

The Spice Starter Sites plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the spicestartersitesimportercreater function in all versions up to, and including, 1.2.5. This makes it possible for unauthenticated attackers to import demo conte...