WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
addon-elements-for-elementor-page-builder
Published
2024-03-28
Title
Elementor Addon Elements < 1.13.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
addon-elements-for-elementor-page-builder
Published
2024-04-29
Title
Elementor Addon Elements < 1.13.4 - Contributor+ Stored XSS
Slug
addon-elements-for-elementor-page-builder
Published
2024-06-11
Title
Elementor Addon Elements < 1.13.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Twitter Widget
Slug
addon-elements-for-elementor-page-builder
Published
2024-06-26
Title
Elementor Addon Elements < 1.13.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
addon-elements-for-elementor-page-builder
Published
2024-06-26
Title
Elementor Addon Elements < 1.13.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
addon-elements-for-elementor-page-builder
Published
2024-08-29
Title
Elementor Addon Elements < 1.13.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via id and eae_slider_animation Parameters
Slug
addon-elements-for-elementor-page-builder
Published
2024-08-29
Title
Elementor Addon Elements < 1.13.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets
Slug
addon-elements-for-elementor-page-builder
Published
2024-09-30
Title
Elementor Addon Elements < 1.13.7 - Missing Authorization
Slug
addon-elements-for-elementor-page-builder
Published
2024-09-30
Title
Elementor Addon Elements < 1.13.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
addon-elements-for-elementor-page-builder
Published
2024-10-11
Title
Elementor Addon Elements < 1.13.9 - Authenticated (Contributor+) Sensitive Information Exposure via table_saved_sections
Slug
addon-elements-for-elementor-page-builder
Published
2025-01-14
Title
Elementor Addon Elements < 1.14 - Contributor+ Sensitive Information Disclosure
Slug
addon-elements-for-elementor-page-builder
Published
2025-12-13
Title
Addon Elements for Elementor < 1.14.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
addon-elements-for-elementor-page-builder
Published
2025-08-28
Title
Elementor Addon Elements < 1.14.5 - Authenticated (Contributor+) Information Exposure
Slug
addon-jobsearch-chat
Published
2026-03-23
Title
Addon Jobsearch Chat < 3.1 - Reflected Cross-Site Scripting
Slug
addon-jobsearch-chat
Published
2026-03-23
Title
Addon Jobsearch Chat < 3.1 - Unauthenticated SQL Injection
Slug
addon-library
Published
2024-02-23
Title
Addon Library <= 1.3.76 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Upload
Slug
addon-sweetalert-contact-form-7
Published
2020-05-25
Title
Add-on SweetAlert Contact Form 7 < 1.0.8 - Authenticated Stored Cross-Site Scripting (XSS)
Slug
addonify-compare-products
Published
2026-02-04
Title
Addonify – Compare Products For WooCommerce < 1.1.18 - Missing Authorization to Unauthenticated Settings Update
Slug
addonify-floating-cart
Published
2026-02-05
Title
Addonify Floating Cart For WooCommerce <= 1.2.17 - Missing Authorization
Slug
addonify-quick-view
Published
2024-07-19
Title
Addonify – Quick View For WooCommerce < 1.2.17 - Unauthenticated Full Path Dislcosure
Slug
addonify-quick-view
Published
2025-12-22
Title
Addonify < 2.0.5 - Missing Authorization
Slug
addonify-wishlist
Published
2026-02-04
Title
Addonify – WooCommerce Wishlist < 2.0.16 - Missing Authorization to Unauthenticated Settings Update
Slug
addons-for-beaver-builder
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
addons-for-beaver-builder
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
addons-for-beaver-builder
Published
2024-07-19
Title
Livemesh Addons for Beaver Builder < 3.7 - Authenticated (Editor+) Stored Cross-Site Scripting