WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
elementor-pro
Published
2024-05-02
Title
Elementor Website Builder Pro < 3.21.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting
Slug
elementor-pro
Published
2024-06-28
Title
Elementor Pro < 3.21.3 - Reflected Cross-Site Scripting
Slug
elementor-pro
Published
2025-01-29
Title
Elementor Website Builder Pro – More than Just a Page Builder < 3.25.11 - Authenticated (Contributor+) Sensitive Information Exposure via Shortcode
Slug
elementor-pro
Published
2025-06-09
Title
Elementor Pro < 3.29.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
elementor-pro
Published
2025-06-19
Title
Elementor Website Builder < 3.29.1 - Contributor+ Stored XSS
Slug
elementor_widget_clever_radio_player
Published
2025-04-18
Title
CLEVER - HTML5 Radio Player With History - Shoutcast and Icecast - Elementor Widget Addon < 2.5 - Unauthenticated Arbitrary File Read
Slug
elementor_widget_universal_video_player
Published
2025-06-03
Title
Universal Video Player <= 1.4.0 - Reflected Cross-Site Scripting
Slug
elements-for-lifterlms
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
elements-for-lifterlms
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
elements-plus
Published
2024-03-14
Title
Elements Plus! < 2.16.3 - Authenticated(Contributor+) Stored Cross-Site Scripting via widget links
Slug
elements-plus
Published
2024-04-15
Title
Elements Plus! < 2.16.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
elements-plus
Published
2025-09-10
Title
Elements Plus! < 2.16.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets
Slug
elementskit
Published
2021-04-13
Title
ElementsKit and ElementsKit Pro < 2.2.0 - Contributor+ Stored XSS
Slug
elementskit
Published
2024-04-18
Title
ElementsKit Pro < 3.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'ekit_btn_id'
Slug
elementskit
Published
2024-04-25
Title
ElementsKit Pro < 3.6.1 - Authenticated (Contributor+) Local File Inclusion via Price Menu, Hotspot, and Advanced Toggle Widgets
Slug
elementskit
Published
2024-05-20
Title
ElementsKit Pro < 3.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
elementskit
Published
2024-06-13
Title
ElementsKit PRO < 3.6.3 - Authenticated (Contributor+) Server-Side Request Forgery
Slug
elementskit
Published
2024-06-14
Title
ElementsKit Elementor addons and Templates Library < 3.6.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Motion Text and Table Widgets
Slug
elementskit
Published
2024-08-14
Title
ElementsKit Pro < 3.6.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
elementskit
Published
2024-08-14
Title
ElementsKit Pro < 3.6.7 - Authenticated (Contributor+) Sensitive Information Exposure
Slug
elementskit
Published
2025-01-27
Title
ElementsKit Pro < 3.7.9 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via url Parameter
Slug
elementskit-lite
Published
2021-04-13
Title
ElementsKit and ElementsKit Pro < 2.2.0 - Contributor+ Stored XSS
Slug
elementskit-lite
Published
2023-08-23
Title
Elements kit Elementor addons < 2.9.2 - Missing Authorization
Slug
elementskit-lite
Published
2024-01-08
Title
ElementsKit Lite < 3.0.4 - Unauthenticated Sensitive Information Exposure
Slug
elementskit-lite
Published
2024-03-15
Title
ElementsKit Elementor addons < 3.0.5 - Contributor+ Stored XSS