WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
addon-elements-for-elementor-page-builder
Published
2025-12-13
Title
Addon Elements for Elementor < 1.14.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
addon-library
Published
2024-02-23
Title
Addon Library <= 1.3.76 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Upload
Slug
addon-sweetalert-contact-form-7
Published
2020-05-25
Title
Add-on SweetAlert Contact Form 7 < 1.0.8 - Authenticated Stored Cross-Site Scripting (XSS)
Slug
addonify-quick-view
Published
2024-07-19
Title
Addonify – Quick View For WooCommerce < 1.2.17 - Unauthenticated Full Path Dislcosure
Slug
addonify-quick-view
Published
2025-12-22
Title
Addonify <= 2.0.4 - Missing Authorization
Slug
addons-for-beaver-builder
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
addons-for-beaver-builder
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
addons-for-beaver-builder
Published
2024-07-19
Title
Livemesh Addons for Beaver Builder < 3.7 - Authenticated (Editor+) Stored Cross-Site Scripting
Slug
addons-for-beaver-builder
Published
2025-12-31
Title
Livemesh Addons for Beaver Builder <= 3.9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
addons-for-divi
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
addons-for-divi
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
addons-for-divi
Published
2024-06-11
Title
Divi Torque Lite – Divi Theme and Extra Theme < 4.0.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG Upload
Slug
addons-for-divi
Published
2025-01-28
Title
Divi Torque Lite < 4.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets
Slug
addons-for-divi
Published
2025-07-02
Title
Magnific Popups JavaScript Library < 1.2.0 - Contributor+ Stored XSS
Slug
addons-for-elementor
Published
2019-02-26
Title
Freemius Library < 2.2.4 - Subscriber+ Arbitrary Option Update
Slug
addons-for-elementor
Published
2021-04-13
Title
Livemesh Addons for Elementor < 6.8 - Contributor+ Stored XSS
Slug
addons-for-elementor
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
addons-for-elementor
Published
2022-11-21
Title
Livemesh Addons for Elementor < 7.2.4 - Admin+ Stored XSS
Slug
addons-for-elementor
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
addons-for-elementor
Published
2024-01-25
Title
Elementor Addons by Livemesh < 8.3.2 - Contributor+ Stored XSS
Slug
addons-for-elementor
Published
2024-02-07
Title
Elementor Addons by Livemesh < 8.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
addons-for-elementor
Published
2024-02-12
Title
Livemesh Addons for Elementor < 8.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via animated_text_class
Slug
addons-for-elementor
Published
2024-03-13
Title
Elementor Addons by Livemesh < 8.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Posts Multislider Widget
Slug
addons-for-elementor
Published
2024-03-13
Title
Elementor Addons by Livemesh < 8.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Posts Slider Widget
Slug
addons-for-elementor
Published
2024-03-13
Title
Elementor Addons by Livemesh < 8.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Posts Carousel Widget