WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
elementskit-lite
Published
2026-05-27
Title
ElementsKit Elementor Addons < 3.9.7 - Contributor+ Missing Authorization
Slug
elementskit-lite
Published
2026-05-27
Title
ElementsKit Elementor Addons <= 3.9.6 - Unauthenticated Missing Authorization
Slug
elementskit-lite
Published
2026-07-14
Title
ElementsKit Lite < 3.10.01 - Subsite Administrator+ Stored XSS via Megamenu Menu-Item Settings (Multisite)
Slug
elementskit-lite
Published
2026-07-14
Title
ElementsKit Lite < 3.10.01 - Subsite Administrator+ PHP Code Injection via Custom Widget Builder (Multisite)
Slug
elespare
Published
2024-04-22
Title
Elespare – Build Your Blog, News & Magazine Websites with Expert-Designed Template Kits. One Click Import: No Coding Skills Required! < 2.1.3 - Missing Authorization to Subscriber+ Arbitrary Post Creation
Slug
elespare
Published
2024-06-12
Title
Elespare – Blog, Magazine and Newspaper Addons for Elementor with Templates, Widgets, Kits, and Header/Footer Builder. One Click Import: No Coding Required! < 3.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Horizontal Nav Menu Widge
Slug
elespare
Published
2026-04-30
Title
Freemius < 2.11.0 - Reflected DOM-Based XSS via url Parameter
Slug
elevio
Published
2025-01-03
Title
Elevio <= 4.4.1 - Cross-Site Request Forgery
Slug
elex-bulk-edit-products-prices-attributes-for-woocommerce-basic
Published
2025-01-03
Title
ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes < 1.5.0 - Shop manager+ SQL Injection
Slug
elex-bulk-edit-products-prices-attributes-for-woocommerce-basic
Published
2025-04-23
Title
ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes < 1.5.0 - Authenticated (Subscriber+) SQL Injection
Slug
elex-bulk-edit-products-prices-attributes-for-woocommerce-basic
Published
2025-07-15
Title
ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes < 1.5.0 - Authenticated (Subscriber+) SQL Injection
Slug
elex-helpdesk-customer-support-ticket-system
Published
2025-01-31
Title
ELEX WordPress HelpDesk & Customer Ticketing System < 3.2.7 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation
Slug
elex-helpdesk-customer-support-ticket-system
Published
2025-05-08
Title
ELEX WordPress HelpDesk & Customer Ticketing System < 3.3.0 - Subscriber+ Arbitrary File Upload
Slug
elex-helpdesk-customer-support-ticket-system
Published
2025-11-20
Title
ELEX WordPress HelpDesk & Customer Ticketing System < 3.3.2 - Missing Authorization to Authenticated (Subscriber+) Ticket Restore
Slug
elex-helpdesk-customer-support-ticket-system
Published
2025-11-20
Title
ELEX WordPress HelpDesk & Customer Ticketing System < 3.3.2 - Missing Authorization to Authenticated (Subscriber+) Trash Empty
Slug
elex-helpdesk-customer-support-ticket-system
Published
2025-11-20
Title
ELEX WordPress HelpDesk & Customer Ticketing System < 3.3.2 - Missing Authorization to Authenticated (Subscriber+) Trash Restore
Slug
elex-helpdesk-customer-support-ticket-system
Published
2025-11-20
Title
ELEX WordPress HelpDesk & Customer Ticketing System < 3.3.1 - Missing Authorization to Authenitcated (Subscriber+) to Scheduled Trigger Deletion
Slug
elex-helpdesk-customer-support-ticket-system
Published
2025-11-20
Title
ELEX WordPress HelpDesk & Customer Ticketing System < 3.3.2 - Unauthenticated Arbitrary File Upload
Slug
elex-helpdesk-customer-support-ticket-system
Published
2025-11-20
Title
ELEX WordPress HelpDesk & Customer Ticketing System < 3.3.2 - Missing Authorization to Authenticated (Subscriber+) Role Removal
Slug
elex-helpdesk-customer-support-ticket-system
Published
2025-11-20
Title
ELEX WordPress HelpDesk & Customer Ticketing System < 3.3.0 - Authenticated (Subscriber+) Insecure Direct Object Reference via 'eh_crm_ticket_single_view_client'
Slug
elex-helpdesk-customer-support-ticket-system
Published
2025-12-01
Title
ELEX WordPress HelpDesk & Customer Ticketing System < 3.3.3 - Authenticated (Contributor+) Privilege Escalation via eh_crm_edit_agent AJAX Action
Slug
elex-helpdesk-customer-support-ticket-system
Published
2025-12-20
Title
ELEX WordPress HelpDesk & Customer Ticketing System < 3.3.5 - Unauthenticated Stored Cross-Site Scripting
Slug
elex-helpdesk-customer-support-ticket-system
Published
2026-01-27
Title
ELEX WordPress HelpDesk & Customer Ticketing System < 3.3.6 - Missing Authorization
Slug
elex-helpdesk-customer-support-ticket-system
Published
2026-02-04
Title
ELEX WordPress HelpDesk & Customer Ticketing System < 3.3.6 - Missing Authorization to Authenticated (Subscriber+) Settings Update
Slug
elex-helpdesk-customer-support-ticket-system
Published
2026-06-02
Title
ELEX WordPress HelpDesk & Customer Ticketing System < 3.3.7 - Authenticated (Subscriber+) SQL Injection