WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
addon-elements-for-elementor-page-builder
Published
2024-08-29
Title
Elementor Addon Elements < 1.13.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via id and eae_slider_animation Parameters
Slug
addon-elements-for-elementor-page-builder
Published
2024-08-29
Title
Elementor Addon Elements < 1.13.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets
Slug
addon-elements-for-elementor-page-builder
Published
2024-09-30
Title
Elementor Addon Elements < 1.13.7 - Missing Authorization
Slug
addon-elements-for-elementor-page-builder
Published
2024-09-30
Title
Elementor Addon Elements < 1.13.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
addon-elements-for-elementor-page-builder
Published
2024-10-11
Title
Elementor Addon Elements < 1.13.9 - Authenticated (Contributor+) Sensitive Information Exposure via table_saved_sections
Slug
addon-elements-for-elementor-page-builder
Published
2025-01-14
Title
Elementor Addon Elements < 1.14 - Contributor+ Sensitive Information Disclosure
Slug
addon-elements-for-elementor-page-builder
Published
2025-12-13
Title
Addon Elements for Elementor < 1.14.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
addon-library
Published
2024-02-23
Title
Addon Library <= 1.3.76 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Upload
Slug
addon-sweetalert-contact-form-7
Published
2020-05-25
Title
Add-on SweetAlert Contact Form 7 < 1.0.8 - Authenticated Stored Cross-Site Scripting (XSS)
Slug
addonify-compare-products
Published
2026-02-04
Title
Addonify – Compare Products For WooCommerce < 1.1.18 - Missing Authorization to Unauthenticated Settings Update
Slug
addonify-floating-cart
Published
2026-02-05
Title
Addonify Floating Cart For WooCommerce <= 1.2.17 - Missing Authorization
Slug
addonify-quick-view
Published
2024-07-19
Title
Addonify – Quick View For WooCommerce < 1.2.17 - Unauthenticated Full Path Dislcosure
Slug
addonify-quick-view
Published
2025-12-22
Title
Addonify < 2.0.5 - Missing Authorization
Slug
addonify-wishlist
Published
2026-02-04
Title
Addonify – WooCommerce Wishlist < 2.0.16 - Missing Authorization to Unauthenticated Settings Update
Slug
addons-for-beaver-builder
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
addons-for-beaver-builder
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
addons-for-beaver-builder
Published
2024-07-19
Title
Livemesh Addons for Beaver Builder < 3.7 - Authenticated (Editor+) Stored Cross-Site Scripting
Slug
addons-for-beaver-builder
Published
2025-12-31
Title
Livemesh Addons for Beaver Builder <= 3.9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
addons-for-beaver-builder
Published
2026-02-25
Title
Livemesh Addons for Beaver Builder <= 3.9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'title' and 'value' Shortcode Attributes
Slug
addons-for-divi
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
addons-for-divi
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
addons-for-divi
Published
2024-06-11
Title
Divi Torque Lite – Divi Theme and Extra Theme < 4.0.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG Upload
Slug
addons-for-divi
Published
2025-01-28
Title
Divi Torque Lite < 4.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets
Slug
addons-for-divi
Published
2025-07-02
Title
Magnific Popups JavaScript Library < 1.2.0 - Contributor+ Stored XSS
Slug
addons-for-elementor
Published
2019-02-26
Title
Freemius Library < 2.2.4 - Subscriber+ Arbitrary Option Update