Plugin icon

PowerFolio – Portfolio & Image Gallery for Elementor

portfolio-elementor

Vulnerabilities:

5

Last Updated:

June 1, 2026

Active Installs:

10000

Published
Title
Fixed in
CVSS
Published
2025-09-22
Title
PowerFolio < 3.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 3.2.2
CVSS
6.4 (medium)
Published
2025-07-03
Title
Portfolio for Elementor & Image Gallery | PowerFolio < 3.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom JS
Fixed in
Fixed in 3.2.1
CVSS
6.4 (medium)
Published
2024-01-16
Title
Post Grid, Image Gallery & Portfolio for Elementor | PowerFolio < 3.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
Fixed in
Fixed in 3.1.1
CVSS
6.4 (medium)
Published
2023-01-03
Title
Portfolio for Elementor, Image Gallery & Post Grid | PowerFolio < 2.3.1 - Contributor+ Stored XSS via Shortcode
Fixed in
Fixed in 2.3.1
CVSS
6.8 (medium)
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Fixed in
Fixed in 2.1.7
CVSS
4.3 (medium)