WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
elementinvader-addons-for-elementor
Published
2025-01-24
Title
ElementInvader Addons for Elementor < 1.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
elementinvader-addons-for-elementor
Published
2025-05-19
Title
ElementInvader Addons for Elementor < 1.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
elementinvader-addons-for-elementor
Published
2025-08-27
Title
ElementInvader Addons for Elementor < 1.3.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
elementinvader-addons-for-elementor
Published
2025-10-15
Title
Elementinvader Addons for Elementor < 1.4.1 – Unauthenticated Arbitrary Email Sending
Slug
elementinvader-addons-for-elementor
Published
2026-02-05
Title
ElementInvader Addons for Elementor < 1.4.2 - Missing Authorization
Slug
elementinvader-addons-for-elementor
Published
2026-03-23
Title
ElementInvader Addons for Elementor < 1.4.3 - Authenticated (Subscriber+) SQL Injection
Slug
elementinvader-addons-for-elementor
Published
2026-07-07
Title
ElementInvader Addons for Elementor < 1.4.4 - Unauthenticated Stored Cross-Site Scripting
Slug
elementor
Published
2017-11-27
Title
Elementor Page Builder < 1.8.0 - Authenticated Unrestricted Editing
Slug
elementor
Published
2020-01-29
Title
Elementor Page Builder < 2.8.5 - Authenticated Reflected XSS
Slug
elementor
Published
2020-01-29
Title
Elementor Page Builder < 2.7.7 - Authenticated Stored XSS
Slug
elementor
Published
2020-03-31
Title
Elementor Page Builder < 2.9.6 - Authenticated Safe Mode Privilege Escalation
Slug
elementor
Published
2020-05-06
Title
Elementor < 2.9.8 - SVG Sanitizer Bypass leading to Authenticated Stored XSS
Slug
elementor
Published
2020-01-14
Title
Elementor < 2.7.5 - Authenticated Arbitrary File Upload
Slug
elementor
Published
2020-06-05
Title
Elementor Page Builder < 2.9.10 - Authenticated Stored XSS
Slug
elementor
Published
2020-07-21
Title
Elementor < 2.9.14 - Authenticated Stored Cross-Site Scripting
Slug
elementor
Published
2021-01-06
Title
Elementor < 3.0.14 - SVG Upload Allowed by Default
Slug
elementor
Published
2020-01-19
Title
Elementor Page Builder < 2.8.4 - Cross-Site Scripting (XSS)
Slug
elementor
Published
2021-03-17
Title
Elementor < 3.1.4 - Authenticated Stored Cross-Site Scripting (XSS) in Column Element
Slug
elementor
Published
2021-03-17
Title
Elementor < 3.1.4 - Authenticated Stored Cross-Site Scripting (XSS) in Heading Widget
Slug
elementor
Published
2021-03-17
Title
Elementor < 3.1.4 - Authenticated Stored Cross-Site Scripting (XSS) in Divider Widget
Slug
elementor
Published
2021-03-17
Title
Elementor < 3.1.4 - Authenticated Stored Cross-Site Scripting (XSS) in Accordion Widget
Slug
elementor
Published
2021-03-17
Title
Elementor < 3.1.4 - Authenticated Stored Cross-Site Scripting (XSS) in Icon Box Widget
Slug
elementor
Published
2021-03-17
Title
Elementor < 3.1.4 - Authenticated Stored Cross-Site Scripting (XSS) in Image Box Widget
Slug
elementor
Published
2021-03-24
Title
Elementor < 3.4.8 - DOM Cross-Site-Scripting
Slug
elementor
Published
2022-04-13
Title
Elementor 3.6.0-3.6.2 - Subscriber+ Arbitrary File Upload