Lucene search
K

65 matches found

Patchstack
Patchstack
added 2026/05/01 9:15 a.m.2 views

WordPress WPBITS Addons For Elementor Page Builder plugin <= 1.7 - Unauthenticated Reflected Cross-Site Scripting vulnerability

Unauthenticated Reflected Cross-Site Scripting vulnerability discovered by Asaf Mozes in WordPress Plugin WPBITS Addons For Elementor Page Builder versions = 1.7...

6.1CVSS5.8AI score0.00135EPSS
Exploits0References1Affected Software1
RedhatCVE
RedhatCVE
added 2026/04/13 7:25 p.m.4 views

CVE-2026-39703

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpbits WPBITS Addons For Elementor Page Builder wpbits-addons-for-elementor allows Stored XSS.This issue affects WPBITS Addons For Elementor Page Builder: from n/a through = 1.8.1...

6.5CVSS5.8AI score0.00039EPSS
Exploits0References1
NVD
NVD
added 2026/04/08 9:16 a.m.0 views

CVE-2026-39703

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpbits WPBITS Addons For Elementor Page Builder wpbits-addons-for-elementor allows Stored XSS.This issue affects WPBITS Addons For Elementor Page Builder: from n/a through = 1.8.1...

6.5CVSS0.00039EPSS
Exploits0References1
CVE
CVE
added 2026/04/08 8:30 a.m.1 views

CVE-2026-39703

CVE-2026-39703 is a Stored XSS vulnerability in the WordPress plugin WPBITS Addons For Elementor Page Builder , affecting versions through 1.8.1 . The issue arises from improper neutralization of input during web page generation, allowing injection of malicious scripts. Connected advisories consi...

6.5CVSS5.9AI score0.00039EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/04/08 8:30 a.m.1 views

CVE-2026-39703

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpbits WPBITS Addons For Elementor Page Builder wpbits-addons-for-elementor allows Stored XSS.This issue affects WPBITS Addons For Elementor Page Builder: from n/a through = 1.8.1...

5.9AI score0.00039EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2026/04/08 8:30 a.m.2 views

CVE-2026-39703 WordPress WPBITS Addons For Elementor Page Builder plugin <= 1.8.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpbits WPBITS Addons For Elementor Page Builder wpbits-addons-for-elementor allows Stored XSS.This issue affects WPBITS Addons For Elementor Page Builder: from n/a through = 1.8.1...

6.5CVSS5.8AI score0.00039EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/04/08 12:0 a.m.1 views

PT-2026-31265

Name of the Vulnerable Software and Affected Versions WPBITS Addons For Elementor Page Builder versions through 1.8.1 Description WPBITS Addons For Elementor Page Builder is susceptible to a Stored Cross-Site Scripting XSS issue due to improper neutralization of input during web page generation...

5.8AI score0.00039EPSS
Exploits0References4
Patchstack
Patchstack
added 2026/02/02 7:40 p.m.2 views

WordPress WPBITS Addons For Elementor Page Builder plugin <= 1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Francesco Carlucci in WordPress Plugin WPBITS Addons For Elementor Page Builder versions = 1.4...

6.4CVSS8.3AI score0.00278EPSS
Exploits0References1Affected Software1
RedhatCVE
RedhatCVE
added 2026/01/29 9:24 a.m.3 views

CVE-2025-9082

The WPBITS Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple widget parameters in versions up to, and including, 1.8 due to insufficient input sanitization and output escaping when dynamic content is enabled. This makes it possible for authenticat...

6.4CVSS6AI score0.00013EPSS
Exploits0References1
NVD
NVD
added 2026/01/28 7:15 a.m.5 views

CVE-2025-9082

The WPBITS Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple widget parameters in versions up to, and including, 1.8 due to insufficient input sanitization and output escaping when dynamic content is enabled. This makes it possible for authenticat...

6.4CVSS0.00013EPSS
Exploits0References5
CVE
CVE
added 2026/01/28 6:43 a.m.17 views

CVE-2025-9082

CVE-2025-9082 concerns the WPBITS Addons For Elementor plugin (WordPress). The vulnerability is a Stored Cross-Site Scripting in multiple widget parameters when dynamic content is enabled, exploitable by authenticated users with contributor-level permissions and above. Root cause is insufficient ...

6.4CVSS6AI score0.00013EPSS
Exploits0References5
EUVD
EUVD
added 2026/01/28 6:43 a.m.3 views

EUVD-2025-206504

The WPBITS Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple widget parameters in versions up to, and including, 1.8 due to insufficient input sanitization and output escaping when dynamic content is enabled. This makes it possible for authenticat...

6.4CVSS6AI score0.00013EPSS
Exploits0References5
Cvelist
Cvelist
added 2026/01/28 6:43 a.m.33 views

CVE-2025-9082 WPBITS Addons For Elementor <= 1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting

The WPBITS Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple widget parameters in versions up to, and including, 1.8 due to insufficient input sanitization and output escaping when dynamic content is enabled. This makes it possible for authenticat...

6.4CVSS0.00013EPSS
Exploits0References5
ATTACKERKB
ATTACKERKB
added 2026/01/28 6:43 a.m.4 views

CVE-2025-9082

The WPBITS Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple widget parameters in versions up to, and including, 1.8 due to insufficient input sanitization and output escaping when dynamic content is enabled. This makes it possible for authenticat...

6.4CVSS6AI score0.00013EPSS
Exploits0References6
Patchstack
Patchstack
added 2026/01/28 1:36 a.m.4 views

WordPress WPBITS Addons For Elementor plugin <= 1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by zer0gh0st in WordPress Plugin WPBITS Addons For Elementor Page Builder versions = 1.8...

6.4CVSS5.9AI score0.00013EPSS
Exploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2026/01/28 12:0 a.m.3 views

PT-2026-5065

The WPBITS Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple widget parameters in versions up to, and including, 1.8 due to insufficient input sanitization and output escaping when dynamic content is enabled. This makes it possible for authenticat...

6.4CVSS6AI score0.00013EPSS
Exploits0References6
RedhatCVE
RedhatCVE
added 2026/01/07 9:14 a.m.3 views

CVE-2024-2129

The WPBITS Addons For Elementor Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's heading widget in all versions up to, and including, 1.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible f...

6.4CVSS7.4AI score0.00278EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2024-53082

Malicious code in bioql PyPI...

6.5CVSS8.7AI score0.00163EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2024-54882

Malicious code in bioql PyPI...

6.5CVSS6.6AI score0.00051EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2024-30395

Malicious code in bioql PyPI...

6.5CVSS6.6AI score0.00163EPSS
Exploits0References1
Rows per page
Query Builder