WordPress Plugin Vulnerabilities | Page 27 | WPScan

0-9
a
b
c
d
e
f
g
h
i
j
k
l
m
n
o
p
q
r
s
t
u
v
w
x
y
z

Slug

Published

2020-01-29

Title

Elementor Page Builder < 2.8.5 - Authenticated Reflected XSS

Slug

Published

2020-01-29

Title

Elementor Page Builder < 2.7.7 - Authenticated Stored XSS

Slug

Published

2020-03-31

Title

Elementor Page Builder < 2.9.6 - Authenticated Safe Mode Privilege Escalation

Slug

Published

2020-05-06

Title

Elementor < 2.9.8 - SVG Sanitizer Bypass leading to Authenticated Stored XSS

Slug

Published

2020-01-14

Title

Elementor < 2.7.5 - Authenticated Arbitrary File Upload

Slug

Published

2020-06-05

Title

Elementor Page Builder < 2.9.10 - Authenticated Stored XSS

Slug

Published

2020-07-21

Title

Elementor < 2.9.14 - Authenticated Stored Cross-Site Scripting

Slug

Published

2021-01-06

Title

Elementor < 3.0.14 - SVG Upload Allowed by Default

Slug

Published

2020-01-19

Title

Elementor Page Builder < 2.8.4 - Cross-Site Scripting (XSS)

Slug

Published

2021-03-17

Title

Elementor < 3.1.4 - Authenticated Stored Cross-Site Scripting (XSS) in Column Element

Slug

Published

2021-03-17

Title

Elementor < 3.1.4 - Authenticated Stored Cross-Site Scripting (XSS) in Heading Widget

Slug

Published

2021-03-17

Title

Elementor < 3.1.4 - Authenticated Stored Cross-Site Scripting (XSS) in Divider Widget

Slug

Published

2021-03-17

Title

Elementor < 3.1.4 - Authenticated Stored Cross-Site Scripting (XSS) in Accordion Widget

Slug

Published

2021-03-17

Title

Elementor < 3.1.4 - Authenticated Stored Cross-Site Scripting (XSS) in Icon Box Widget

Slug

Published

2021-03-17

Title

Elementor < 3.1.4 - Authenticated Stored Cross-Site Scripting (XSS) in Image Box Widget

Slug

Published

2021-03-24

Title

Elementor < 3.4.8 - DOM Cross-Site-Scripting

Slug

Published

2022-04-13

Title

Elementor 3.6.0-3.6.2 - Subscriber+ Arbitrary File Upload

Slug

Published

2022-06-13

Title

Elementor < 3.5.6 - DOM Reflected Cross-Site Scripting

Slug

Published

2023-05-02

Title

Elementor Website Builder < 3.12.2 - Admin+ SQLi

Slug

Published

2023-05-12

Title

Elementor Website Builder < 3.13.2 - Missing Authorization

Slug

Published

2023-07-19

Title

Elementor < 3.5.5 - Iframe Injection

Slug

Published

2023-11-08

Title

Elementor Website Builder < 3.16.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via get_inline_svg()

Slug

Published

2023-11-08

Title

Elementor Website Builder < 3.16.5 - Missing Authorization to Arbitrary Attachment Read

Slug

Published

2023-12-06

Title

Elementor < 3.18.2 - Contributor+ Arbitrary File Upload to RCE via Template Import

Slug

Published

2024-02-07

Title

Elementor < 3.19.1 - Authenticated(Contributor+) Arbitrary File Deletion and PHAR Deserialization