WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
essential-addons-for-elementor-lite
Published
2026-08-12
Title
Essential Addons for Elementor < 6.7.2 - Unauthenticated Privilege Escalation via Custom Profile Field Mass Assignment
Slug
essential-addons-for-elementor-lite
Published
2026-10-01
Title
Essential Addons for Elementor < 6.8.5 - Contributor+ Stored XSS
Slug
essential-addons-for-elementor-lite
Published
2026-10-21
Title
Essential Addons for Elementor < 6.8.7 - Author+ Content Injection via Pricing Table and Post Timeline Title Tag
Slug
essential-addons-for-elementor-lite
Published
2026-10-21
Title
Essential Addons for Elementor < 6.8.7 - Admin+ Cross-Site User Approval State Change via Bulk Action
Slug
essential-addons-for-elementor-lite
Published
2026-10-26
Title
Essential Addons for Elementor 6.7.3 - 6.8.6 - Unauthenticated Registration Approval Bypass via OTP Verification
Slug
essential-addons-for-elementor-lite
Published
2026-10-26
Title
Essential Addons for Elementor < 6.8.7 - Unauthenticated Private Post Meta Disclosure via load_more AJAX Handler
Slug
essential-addons-for-elementor-lite
Published
2026-10-29
Title
Essential Addons for Elementor 6.6.0 - 6.8.7 - Author+ Privilege Escalation via register_user_role
Slug
essential-addons-for-elementor-lite
Published
2026-10-30
Title
Essential Addons for Elementor < 6.8.8 - Unauthenticated Limited Privilege Escalation via Revision ID in 'page_id' Parameter
Slug
essential-blocks
Published
2023-04-18
Title
Essential Blocks < 4.0.7 - Multiple Functions Missing Authorization Checks
Slug
essential-blocks
Published
2023-09-19
Title
Essential Blocks < 4.2.1 - Unauthenticated Object Injection
Slug
essential-blocks
Published
2023-09-13
Title
Essential Blocks <= 4.2.0 - Unauthenticated PHP Object Injection via queries
Slug
essential-blocks
Published
2023-11-13
Title
Essential Blocks for Gutenberg < 4.2.1 - Missing Authorization via AJAX actions
Slug
essential-blocks
Published
2023-09-13
Title
Essential Blocks <= 4.2.0 - Unauthenticated PHP Object Injection via products
Slug
essential-blocks
Published
2023-12-21
Title
Essential Blocks < 4.4.3 - Unauthenticated Local File Inclusion
Slug
essential-blocks
Published
2023-12-26
Title
Essential Blocks for Gutenberg < 4.2.1 - Contributor+ Unauthorised Actions
Slug
essential-blocks
Published
2023-12-26
Title
Essential Blocks for Gutenberg < 4.2.1 - Subscriber+ Unauthorised Actions
Slug
essential-blocks
Published
2024-01-09
Title
Essential Blocks < 4.4.7 - Contributor+ Stored Cross-Site Scripting
Slug
essential-blocks
Published
2024-02-28
Title
Essential Blocks < 4.5.2 - Contributor+ Stored XSS
Slug
essential-blocks
Published
2024-03-19
Title
Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates < 4.5.4 - Contributor+ Stored XSS
Slug
essential-blocks
Published
2024-03-28
Title
Essential Blocks for Gutenberg < 4.4.10 - Missing Authorization
Slug
essential-blocks
Published
2024-04-05
Title
Essential Blocks for Gutenberg < 4.5.4 - Contributor+ Stored Cross-Site Scripting
Slug
essential-blocks
Published
2024-04-18
Title
Essential Blocks < 4.5.10 - Contributor+ DOM-Based XSS via Social Icons Block
Slug
essential-blocks
Published
2024-05-16
Title
Essential Blocks < 4.5.13 - Contributor+ Stored XSS
Slug
essential-blocks
Published
2024-07-12
Title
Essential Blocks < 4.7.0 - Contributor+ Stored XSS
Slug
essential-blocks
Published
2024-09-30
Title
Essential Blocks for Gutenberg < 4.9.0 - Authenticated (Contributor+) Stored Cross-Site Scripting