WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
premium-addons-for-elementor
Published
2024-04-22
Title
Premium Addons for Elementor < 4.10.26 - Contributor+ Stored XSS
Slug
premium-addons-for-elementor
Published
2024-05-22
Title
Premium Addons for Elementor < 4.10.32 - Contributor+ Stored XSS
Slug
premium-addons-for-elementor
Published
2024-05-30
Title
Premium Addons for Elementor < 4.10.32 - Contributor+ DOM-Based Stored Cross-Site Scripting via Global Tooltip
Slug
premium-addons-for-elementor
Published
2024-05-30
Title
Premium Addons for Elementor < 4.10.32 - Authenticated (Contributor+) Stored Cross-Site Scripting via Fancy Text Widget
Slug
premium-addons-for-elementor
Published
2024-05-30
Title
Premium Addons for Elementor < 4.10.32 - Missing Authorization to Information Disclosure
Slug
premium-addons-for-elementor
Published
2024-05-30
Title
Premium Addons for Elementor < 4.10.32 - Missing Authorization to Information Disclosure
Slug
premium-addons-for-elementor
Published
2024-06-11
Title
Premium Addons for Elementor < 4.10.34 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting
Slug
premium-addons-for-elementor
Published
2024-07-02
Title
Premium Addons for Elementor < 4.10.36 - Contributor+ Stored Cross-Site Scripting via Countdown Widget
Slug
premium-addons-for-elementor
Published
2024-07-03
Title
Premium Addons for Elementor < 4.10.36 - Regular Expressions Denial of Service
Slug
premium-addons-for-elementor
Published
2024-07-11
Title
Premium Addons for Elementor < 4.10.37 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Animated Text Widget
Slug
premium-addons-for-elementor
Published
2024-07-09
Title
Premium Addons for Elementor < 4.10.35 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
premium-addons-for-elementor
Published
2024-08-07
Title
Premium Addons for Elementor < 4.10.39 - Missing Authorization to Authenticated (Contributor+) Arbitrary Content Deletion and Arbitrary Title Update
Slug
premium-addons-for-elementor
Published
2024-09-26
Title
Premium Addons for Elementor < 4.10.53 - Authenticated (Contributor+) Stored Cross-Site Scripting via Media Grid Widget
Slug
premium-addons-for-elementor
Published
2024-10-28
Title
Premium Addons for Elementor < 4.10.61 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Video Box Widget
Slug
premium-addons-for-elementor
Published
2024-12-19
Title
Premium Addons for Elementor < 4.10.57 - Missing Authorization
Slug
premium-addons-for-elementor
Published
2025-06-09
Title
Premium Addons for Elementor < 4.11.9 - Contributor+ Stored XSS via Countdown Widget
Slug
premium-addons-for-elementor
Published
2025-07-03
Title
Premium Addons for Elementor < 4.10.70 - Contributor+ Stored XSS
Slug
premium-addons-for-elementor
Published
2025-12-22
Title
Premium Addons for Elementor < 4.11.54 - Unauthenticated Sensitive Information Exposure
Slug
premium-addons-for-elementor
Published
2025-12-22
Title
Premium Addons for Elementor < 4.11.54 - Arbitrary Template Creation via CSRF
Slug
premium-addons-for-elementor
Published
2025-12-04
Title
Premium Addons for Elementor < 4.11.54 - Unauthenticated Information Exposure
Slug
premium-addons-for-elementor
Published
2026-01-17
Title
Premium Addons for Elementor < 4.11.64 - Subscriber+ Settings Update
Slug
premium-addons-for-elementor
Published
2026-05-01
Title
Premium Addons for Elementor < 4.11.71 - Contributor+ Stored XSS via 'custom_svg' Parameter
Slug
premium-addons-for-elementor
Published
2026-07-10
Title
Premium Addons for Elementor < 4.11.85 - Contributor+ Stored Cross-Site Scripting via premium_tooltip_text Parameter
Slug
premium-addons-for-kingcomposer
Published
2025-08-11
Title
Premium Addons for KingComposer <= 1.1.1 - Unauthenticated Local File Inclusion
Slug
premium-addons-for-kingcomposer
Published
2026-06-29
Title
Premium Addons for KingComposer <= 1.1.1 - Missing Authorization to Unauthenticated Arbitrary Custom Sidebar Creation and Deletion via 'add_custom_sidebar' and 'remove_custom_sidebar' AJAX actions