8994 matches found
CVE-2025-8146 Qi Addons for Elementor <= 1.9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via TypeOut Text Widget
The Qi Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's TypeOut Text widget in all versions up to, and including, 1.9.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...
CVE-2025-8146 Qi Addons for Elementor <= 1.9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via TypeOut Text Widget
The Qi Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's TypeOut Text widget in all versions up to, and including, 1.9.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...
CVE-2025-8146
CVE-2025-8146 : Qi Addons For Elementor (WordPress) is vulnerable to Stored Cross-Site Scripting via the TypeOut Text widget in all versions up to and including 1.9.2, due to insufficient input sanitization and output escaping on user attributes. Exploitation requires authenticated access at cont...
CVE-2025-8146: Improper Neutralization of Input During Web Page Generation
The Qi Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's TypeOut Text widget in all versions up to, and including, 1.9.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...
CVE-2025-8212: Improper Neutralization of Input During Web Page Generation
The Medical Addon for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Typewriter widget in all versions up to, and including, 1.6.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...
PT-2025-31722 · WordPress · Qi Addons For Elementor
Name of the Vulnerable Software and Affected Versions: Qi Addons For Elementor plugin for WordPress versions up to and including 1.9.2 Description: The Qi Addons For Elementor plugin for WordPress is susceptible to Stored Cross-Site Scripting through the TypeOut Text widget. Insufficient input...
CVE-2025-7845 Stratum – Elementor Widgets <= 1.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Advanced Google Maps and Image Hotspot Widgets
The Stratum – Elementor Widgets plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Advanced Google Maps and Image Hotspot widgets in all versions up to, and including, 1.6.0 due to insufficient input sanitization and output escaping on user supplied attributes. Thi...
Malicious code in balances-summary-widget (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6698 Malicious code in balances-summary-widget (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in goals-summary-widget (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6724 Malicious code in goals-summary-widget (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in fulfillment-auth-widget (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6723 Malicious code in fulfillment-auth-widget (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in risk-profile-widget (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6757 Malicious code in risk-profile-widget (npm)
The package communicates with a domain associated with malicious activity...
PT-2025-31844
Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description The vulnerability relates to insufficient access control within the Framework component of Android operating systems. Exploitation may allow an attacker to elevate their privileges. The issue...
Malicious code in processes-widget-fe-commons (npm)
--- -= Per source details. Do not edit below this line.=-...
CVE-2025-4566 Elementor <= 3.30.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Text Path Widget
The Elementor Website Builder – More Than Just a Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the data-text DOM element attribute in Text Path widget in all versions up to, and including, 3.30.2 due to insufficient input sanitization and output escaping. This...
CVE-2025-4566: Improper Neutralization of Input During Web Page Generation
The Elementor Website Builder – More Than Just a Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the data-text DOM element attribute in Text Path widget in all versions up to, and including, 3.30.2 due to insufficient input sanitization and output escaping. This...