WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
essential-addons-for-elementor-lite
Published
2025-04-16
Title
Essential Addons for Elementor < 6.1.10 - Contributor+ Stored XSS
Slug
essential-addons-for-elementor-lite
Published
2025-04-16
Title
Essential Addons for Elementor < 6.1.10 - Contributor+ Information Disclosure
Slug
essential-addons-for-elementor-lite
Published
2025-06-06
Title
Essential Addons for Elementor < 6.1.13 - Contributor+ Stored XSS via Pricing Table Widget
Slug
essential-addons-for-elementor-lite
Published
2025-06-06
Title
Essential Addons for Elementor < 6.1.13 - Contributor+ Stored XSS via Event Calendar Widget
Slug
essential-addons-for-elementor-lite
Published
2025-07-02
Title
Magnific Popups JavaScript Library < 1.2.0 - Contributor+ Stored XSS
Slug
essential-addons-for-elementor-lite
Published
2025-07-07
Title
Essential Addons for Elementor – Popular Elementor Templates and Widgets < 6.1.20 - Authenticated (Contributor+) Stored Cross-Site Scripting via `Calendar` And `Business Reviews` Widgets
Slug
essential-addons-for-elementor-lite
Published
2025-08-14
Title
Essential Addons for Elementor < 6.2.3 - Contributor+ DOM-Based Stored XSS
Slug
essential-addons-for-elementor-lite
Published
2025-09-17
Title
Essential Addons for Elementor < 6.3.0 - Missing Authorization
Slug
essential-addons-for-elementor-lite
Published
2025-12-16
Title
Essential Addons for Elementor < 6.5.4 - Contributor+ Stored XSS
Slug
essential-addons-for-elementor-lite
Published
2026-01-06
Title
Essential Addons for Elementor < 6.5.4 - Contributor+ Stored XSS
Slug
essential-addons-for-elementor-lite
Published
2026-01-15
Title
Essential Addons for Elementor < 6.5.6 - Unauthenticated Sensitive Information Exposure
Slug
essential-addons-for-elementor-lite
Published
2026-02-13
Title
Essential Addons for Elementor < 6.5.10 - Contributor+ Stored XSS
Slug
essential-addons-for-elementor-lite
Published
2026-04-22
Title
Essential Addons for Elementor < 6.6.0 - Unauthenticated Missing Authorization
Slug
essential-addons-for-elementor-lite
Published
2025-11-18
Title
Essential Addons for Elementor < 6.5.6 - Unauthenticated Missing Authorization
Slug
essential-addons-for-elementor-lite
Published
2026-05-13
Title
Essential Addons for Elementor < 6.6.0 - Author+ Limited Privilege Escalation via register_user
Slug
essential-addons-for-elementor-lite
Published
2026-06-05
Title
Essential Addons for Elementor < 6.6.5 - Unauthenticated Sensitive Information Exposure via load_more AJAX Handler
Slug
essential-addons-for-elementor-lite
Published
2026-07-07
Title
Essential Addons for Elementor < 6.6.3 - Author+ Stored Cross-Site Scripting via Event Calendar Widget
Slug
essential-addons-for-elementor-lite
Published
2026-07-13
Title
Essential Addons for Elementor - Lite < 6.6.10 - Contributor+ Stored XSS via Pricing Table Title Tag
Slug
essential-addons-for-elementor-lite
Published
2026-07-13
Title
Essential Addons for Elementor - Lite < 6.6.10 - Unauthenticated Draft/Private WooCommerce Product Disclosure via Compare Table
Slug
essential-addons-for-elementor-lite
Published
2026-07-10
Title
Essential Addons for Elementor < 6.6.11 - Contributor+ Account Takeover via Email Header Injection
Slug
essential-blocks
Published
2023-04-18
Title
Essential Blocks < 4.0.7 - Multiple Functions Missing Authorization Checks
Slug
essential-blocks
Published
2023-09-19
Title
Essential Blocks < 4.2.1 - Unauthenticated Object Injection
Slug
essential-blocks
Published
2023-09-13
Title
Essential Blocks <= 4.2.0 - Unauthenticated PHP Object Injection via queries
Slug
essential-blocks
Published
2023-11-13
Title
Essential Blocks for Gutenberg < 4.2.1 - Missing Authorization via AJAX actions
Slug
essential-blocks
Published
2023-09-13
Title
Essential Blocks <= 4.2.0 - Unauthenticated PHP Object Injection via products