CVE-2026-66574WordPress Element Pack Elementor Addons plugin <= 8.8.3 - Cross Site Scripting (XSS) vulnerability Exploitation status Not confirmed Fix Affected product E Element Pack Elementor Addons Published 09/17/2026 Severity Medium CVE-2026-78657SigmaForms Pro <= 1.4.11 - Unauthenticated Arbitrary File Deletion via Path Traversal in File Upload Field Exploitation status Not known exploited Fix Affected product S SigmaForms Pro – AI Generated Forms Published 09/02/2026 Severity Critical CVE-2026-14494Sigma Forms Pro <= 1.4.5 - Unauthenticated Unauthenticated Arbitrary File Upload Leading to Remote Code Execution via Pre-built Template File Upload Field Exploitation status Not known exploited Fix Affected product S SigmaForms Pro – AI Generated Forms Published 08/29/2026 Severity Critical CVE-2026-65502WordPress Element Pack Elementor Addons plugin <= 8.7.13 - Captcha Bypass vulnerability Exploitation status Not known exploited Fix Affected product E Element Pack Elementor Addons Published 08/06/2026 Severity Medium CVE-2026-25403WordPress Ultimate Store Kit Elementor Addons plugin <= 3.0.5 - Broken Access Control vulnerability Exploitation status Not known exploited Fix Affected product U Ultimate Store Kit Elementor Addons Published 08/06/2026 Severity Medium CVE-2026-0673Element Pack Addons for Elementor <= 8.3.15 - Unauthenticated SMTP Header Injection Exploitation status Not known exploited Fix Affected product E Element Pack Addons for Elementor – Elementor Widgets, Elementor Templates, Elementor Addons Published 08/06/2026 Severity Medium CVE-2026-65505WordPress Ultimate Store Kit Elementor Addons plugin <= 3.0.5 - Sensitive Data Exposure vulnerability Exploitation status Not known exploited Fix Affected product U Ultimate Store Kit Elementor Addons Published 07/23/2026 Severity Medium CVE-2026-65503WordPress Ultimate Store Kit Elementor Addons plugin <= 3.0.5 - Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product U Ultimate Store Kit Elementor Addons Published 07/23/2026 Severity Medium CVE-2026-57413WordPress Instant Image Generator plugin <= 2.1.4 - Server Side Request Forgery (SSRF) vulnerability Exploitation status Not known exploited Fix Affected product I Instant Image Generator Published 07/13/2026 Severity Medium CVE-2025-63079WordPress Live Copy Paste for Elementor plugin <= 1.5.3 - Broken Access Control vulnerability Exploitation status Not known exploited Fix Affected product L Live Copy Paste for Elementor Published 06/26/2026 Severity Medium CVE-2026-52705WordPress SigmaForms Pro – AI Generated Forms plugin <= 1.4.5 - Arbitrary File Upload vulnerability Exploitation status Not known exploited Fix Affected product S SigmaForms Pro – AI Generated Forms Published 06/17/2026 Severity Critical CVE-2026-40721WordPress Element Pack Pro plugin <= 9.0.6 - Local File Inclusion vulnerability Exploitation status Not known exploited Fix Affected product E Element Pack Pro Published 06/17/2026 Severity High CVE-2026-40745WordPress Element Pack Elementor Addons plugin <= 8.4.2 - SQL Injection vulnerability Exploitation status Not known exploited Fix Affected product E Element Pack Elementor Addons Published 04/15/2026 Severity High CVE-2026-4655Element Pack Addons for Elementor <= 8.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via SVG Image Widget Exploitation status Not known exploited Fix Affected product E Element Pack – Widgets, Templates & Addons for Elementor Published 04/08/2026 Severity Medium CVE-2026-4341Prime Slider <= 4.1.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'follow_us_text' Parameter Exploitation status Not known exploited Fix Affected product P Prime Slider – Addons for Elementor Published 04/08/2026 Severity Medium CVE-2026-24362WordPress Ultimate Post Kit plugin <= 4.0.21 - Broken Access Control vulnerability Exploitation status Not known exploited Fix Affected product U Ultimate Post Kit Published 03/25/2026 Severity Medium CVE-2026-1793Element Pack Addons for Elementor <= 8.3.17 - Authenticated (Contributor+) Arbitrary File Read Exploitation status Not known exploited Fix Affected product E Element Pack – Widgets, Templates & Addons for Elementor Published 02/15/2026 Severity Medium CVE-2025-31413WordPress Element Pack Elementor Addons plugin <= 8.3.13 - Cross Site Request Forgery (CSRF) vulnerability Exploitation status Not known exploited Fix Affected product E Element Pack Elementor Addons Published 01/22/2026 Severity Medium CVE-2026-0808Spin Wheel <= 2.1.0 - Unauthenticated Client-Side Prize Manipulation via 'prize_index' Parameter Exploitation status Not known exploited Fix Affected product S Spin Wheel – Interactive spinning wheel that offers coupons Published 01/17/2026 Severity Medium CVE-2025-69336WordPress Ultimate Store Kit Elementor Addons plugin <= 2.9.4 - Broken Access Control vulnerability Exploitation status Not known exploited Fix Affected product U Ultimate Store Kit Elementor Addons Published 01/06/2026 Severity Medium CVE-2025-68500WordPress Prime Slider – Addons For Elementor plugin <= 4.0.10 - Server Side Request Forgery (SSRF) vulnerability Exploitation status Not known exploited Fix Affected product P Prime Slider – Addons for Elementor Published 12/24/2025 Severity Medium CVE-2025-14277Prime Slider – Addons for Elementor <= 4.0.9 - Authenticated (Subscriber+) Server-Side Request Forgery Exploitation status Not known exploited Fix Affected product P Prime Slider – Addons for Elementor Published 12/18/2025 Severity Medium CVE-2025-13196Element Pack Addons for Elementor <= 8.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Open Street Map widget Exploitation status Not known exploited Fix Affected product E Element Pack – Widgets, Templates & Addons for Elementor Published 11/18/2025 Severity Medium CVE-2025-12134ZoloBlocks <= 2.3.11 - Missing Authorization to Unauthenticated Popup Enable/Disable Exploitation status Not known exploited Fix Affected product Z ZoloBlocks – Gutenberg Block Editor Plugin with Advanced Blocks, Dynamic Content, Templates & Patterns Published 10/24/2025 Severity Medium CVE-2025-49903WordPress ZoloBlocks plugin <= 2.3.11 - Broken Access Control vulnerability Exploitation status Not known exploited Fix Affected product Z ZoloBlocks Published 10/22/2025 Severity Medium CVE-2025-11536Element Pack Addons for Elementor <= 8.2.5 - Authenticated (Subscriber+) Blind Server-Side Request Forgery Exploitation status Not known exploited Fix Affected product E Element Pack – Widgets, Templates & Addons for Elementor Published 10/20/2025 Severity Medium CVE-2025-9075ZoloBlocks – Gutenberg Block Editor Plugin with Advanced Blocks, Dynamic Content, Templates & Patterns <= 2.3.10 - Authenticated (Contributor+) Stored Cross-Site Scripting Exploitation status Not known exploited Fix Affected product Z ZoloBlocks – Gutenberg Block Editor Plugin with Advanced Blocks, Dynamic Content, Templates & Patterns Published 10/01/2025 Severity Medium CVE-2025-60161WordPress ZoloBlocks Plugin <= 2.3.11 - Server Side Request Forgery (SSRF) Vulnerability Exploitation status Not known exploited Fix Affected product Z ZoloBlocks Published 09/26/2025 Severity Medium CVE-2025-58017WordPress Ultimate Store Kit Elementor Addons plugin <= 2.8.6 - Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product U Ultimate Store Kit Elementor Addons Published 09/22/2025 Severity Medium CVE-2025-58230WordPress ZoloBlocks plugin <= 2.3.12 - Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product Z ZoloBlocks Published 09/22/2025 Severity Medium CVE-2025-53210WordPress ZoloBlocks Plugin <= 2.3.2 - Local File Inclusion Vulnerability Exploitation status Not known exploited Fix Affected product Z ZoloBlocks Published 08/20/2025 Severity High CVE-2025-8100Element Pack Elementor Addons and Templates <= 8.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Open Street Map Widget Marker Content Exploitation status Not known exploited Fix Affected product E Element Pack – Widgets, Templates & Addons for Elementor Published 08/06/2025 Severity Medium CVE-2025-7644Pixel Gallery Addons for Elementor – Easy Grid, Creative Gallery, Drag and Drop Grid, Custom Grid Layout, Portfolio Gallery <= 1.6.7 - Authenticated (Contributor+) Stored Cross-Site Scripting Exploitation status Not known exploited Fix Affected product P Pixel Gallery Addons for Elementor – Easy Grid, Creative Gallery, Drag and Drop Grid, Custom Grid Layout, Portfolio Gallery Published 07/22/2025 Severity Medium CVE-2025-5944Element Pack Addons for Elementor <= 8.0.0 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via data-caption Attribute Exploitation status Not known exploited Fix Not confirmed Affected product E Element Pack Elementor Addons and Templates Published 07/03/2025 Severity Medium CVE-2025-46258WordPress Element Pack Pro Plugin < 8.0.0 - Broken Access Control vulnerability Exploitation status Not known exploited Fix Affected product E Element Pack Pro Published 06/05/2025 Severity Medium CVE-2025-46257WordPress Element Pack Pro Plugin < 8.0.0 - Cross Site Request Forgery (CSRF) vulnerability Exploitation status Not known exploited Fix Affected product E Element Pack Pro Published 06/05/2025 Severity Medium CVE-2025-5292Element Pack Addons for Elementor – Best Elementor addons with Ready Templates, Blocks, Widgets and WooCommerce Builder <= 5.11.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting Exploitation status Not known exploited Fix Affected product E Element Pack – Widgets, Templates & Addons for Elementor Published 05/31/2025 Severity Medium CVE-2025-2168Ultimate Store Kit Elementor Addons, Woocommerce Builder, EDD Builder, Elementor Store Builder, Product Grid, Product Table, Woocommerce Slider <= 2.4.1 - Cross-Site Request Forgery to Limited User Meta Update Exploitation status Not known exploited Fix Affected product U Ultimate Store Kit – Addon For WooCommerce, EDD and Elementor Published 05/01/2025 Severity Medium CVE-2025-1458Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid, Carousel and Remote Arrows) <= 5.10.29 - Authenticated (Contributor+) Stored Cross-Site Scripting Exploitation status Not known exploited Fix Affected product E Element Pack – Widgets, Templates & Addons for Elementor Published 04/26/2025 Severity Medium CVE-2025-1457Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid, Carousel and Remote Arrows) <= 5.10.28 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting Exploitation status Not known exploited Fix Affected product E Element Pack – Widgets, Templates & Addons for Elementor Published 04/19/2025 Severity Medium CVE-2025-39588WordPress Ultimate Store Kit Elementor Addons plugin <= 2.4.0 - Deserialization of untrusted data Vulnerability Exploitation status Not known exploited Fix Affected product U Ultimate Store Kit Elementor Addons Published 04/17/2025 Severity Critical CVE-2025-32184WordPress Ultimate Store Kit Elementor Addons plugin <= 2.5.0 - Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product U Ultimate Store Kit Elementor Addons Published 04/04/2025 Severity Medium CVE-2025-24584WordPress Ultimate Store Kit Elementor Addons plugin <= 2.3.0 - Broken Access Control vulnerability Exploitation status Not known exploited Fix Affected product U Ultimate Store Kit Elementor Addons Published 01/27/2025 Severity Medium CVE-2024-12043Prime Slider – Addons For Elementor (Revolution of a slider, Hero Slider, Ecommerce Slider) <= 3.16.5 - Authenticated (Contributor+) Stored Cross-Site Scripting Exploitation status Not known exploited Fix Affected product P Prime Slider – Addons for Elementor Published 01/23/2025 Severity Medium CVE-2024-12851Element Pack Lite - Addons for Elementor <= 5.10.14 - Authenticated (Contributor+) Stored Cross-Site Scripting Exploitation status Not known exploited Fix Affected product E Element Pack – Widgets, Templates & Addons for Elementor Published 01/08/2025 Severity Medium CVE-2024-11852Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.10.12 - Missing Authorization Exploitation status Not known exploited Fix Affected product E Element Pack – Widgets, Templates & Addons for Elementor Published 12/22/2024 Severity Medium CVE-2024-9058Element Pack Elementor Addons <= 5.10.5 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Lightbox Widget Exploitation status Not known exploited Fix Affected product E Element Pack – Widgets, Templates & Addons for Elementor Published 12/03/2024 Severity Medium CVE-2024-10980Element Pack Elementor Addons < 5.10.3 - Contributor+ Stored XSS Exploitation status Public exploit Fix Affected product E Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid, Carousel and Remote Arrows) Published 11/29/2024 Severity Medium CVE-2024-10493Element Pack Elementor Addons < 5.10.3 - Contributor+ Stored XSS Exploitation status Public exploit Fix Affected product E Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) Published 11/28/2024 Severity Medium CVE-2024-52377WordPress Instant Image Generator (One Click Image Uploads from Pixabay, Pexels and OpenAI) plugin <= 1.5.2 - Arbitrary File Upload vulnerability Exploitation status Not known exploited Fix Affected product I Instant Image Generator Published 11/14/2024 Severity Critical CVE-2024-8442Prime Slider - Addons For Elementor (Revolution of a slider, Hero Slider, Ecommerce Slider <= 3.15.18 - Authenticated (Contributor+) Stored Cross-Site Scripting via Blog Widget Exploitation status Not known exploited Fix Affected product P Prime Slider – Addons for Elementor Published 11/07/2024 Severity Medium CVE-2024-9867Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.10.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Open Map Widget Exploitation status Not known exploited Fix Affected product E Element Pack – Widgets, Templates & Addons for Elementor Published 11/05/2024 Severity Medium CVE-2024-9657Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.10.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting Exploitation status Not known exploited Fix Affected product E Element Pack – Widgets, Templates & Addons for Elementor Published 11/05/2024 Severity Medium CVE-2024-9868Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.10.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Age Gate Exploitation status Not known exploited Fix Affected product E Element Pack – Widgets, Templates & Addons for Elementor Published 11/02/2024 Severity Medium CVE-2024-10310Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.10.1 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Custom Gallery Widget Exploitation status Not known exploited Fix Affected product E Element Pack – Widgets, Templates & Addons for Elementor Published 11/02/2024 Severity Medium CVE-2022-4974Freemius SDK <= 2.4.2 - Missing Authorization Checks Exploitation status Not known exploited Fix Affected product P Prime Slider – Addons for Elementor Published 10/16/2024 Severity Medium CVE-2024-47392WordPress Element Pack Elementor Addons plugin <= 5.7.5 - Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product E Element Pack Elementor Addons Published 10/05/2024 Severity Medium CVE-2024-47629WordPress Ultimate Store Kit Elementor Addons plugin <= 2.0.5 - Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product U Ultimate Store Kit Elementor Addons Published 10/05/2024 Severity Medium CVE-2024-8030Ultimate Store Kit Elementor Addons, Woocommerce Builder, EDD Builder, Elementor Store Builder, Product Grid, Product Table, Woocommerce Slider <= 2.0.3 - Unauthenticated PHP Object Injection Exploitation status Not known exploited Fix Affected product U Ultimate Store Kit – Addon For WooCommerce, EDD and Elementor Published 08/28/2024 Severity Critical CVE-2024-5335Ultimate Store Kit Elementor Addons, Woocommerce Builder, EDD Builder, Elementor Store Builder, Product Grid, Product Table, Woocommerce Slider <= 1.6.4 - Unauthenticated PHP Object Injection Exploitation status Not known exploited Fix Affected product U Ultimate Store Kit – Addon For WooCommerce, EDD and Elementor Published 08/21/2024 Severity Critical CVE-2024-43342WordPress Ultimate Store Kit Elementor Addons, Woocommerce Builder, EDD Builder, Elementor Store Builder, Product Grid, Product Table, Woocommerce Slider plugin <= 1.6.4 - Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product U Ultimate Store Kit Elementor Addons Published 08/18/2024 Severity Medium CVE-2024-7247Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Gallery and Countdown Widgets Exploitation status Not known exploited Fix Affected product E Element Pack – Widgets, Templates & Addons for Elementor Published 08/13/2024 Severity Medium CVE-2024-4359Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.7.2 - Authenticated (Contributor+) Arbitrary File Read Exploitation status Not known exploited Fix Affected product E Element Pack – Widgets, Templates & Addons for Elementor Published 08/09/2024 Severity Medium CVE-2024-4360Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via title_tag Exploitation status Not known exploited Fix Affected product E Element Pack – Widgets, Templates & Addons for Elementor Published 08/09/2024 Severity Medium CVE-2024-4643Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.6.11 - Authenticated (Contributor+) Stored Cross-Site Scripting Exploitation status Not known exploited Fix Affected product E Element Pack – Widgets, Templates & Addons for Elementor Published 08/02/2024 Severity Medium CVE-2024-39667WordPress Element Pack Elementor Addons plugin <= 5.6.11 - Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product E Element Pack Elementor Addons Published 08/01/2024 Severity Medium CVE-2024-2455Element Pack - Addon for Elementor Page Builder WordPress Plugin <= 7.9.0 - Authenticated(Contributor+) Stored Cross-Site Scripting via Wrapper Link URL Exploitation status Not known exploited Fix Affected product E Element Pack Pro - Addon for Elementor Page Builder WordPress Plugin Published 08/01/2024 Severity Medium CVE-2024-5555Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.6.5 - Authenticated (Contributor+) Stored Cross-Site Scripting Exploitation status Not known exploited Fix Affected product E Element Pack – Widgets, Templates & Addons for Elementor Published 07/18/2024 Severity Medium CVE-2024-5554Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.6.11 - Authenticated (Contributor+) Stored Cross-Site Scripting Exploitation status Not known exploited Fix Affected product E Element Pack – Widgets, Templates & Addons for Elementor Published 07/18/2024 Severity Medium CVE-2024-5662Ultimate Post Kit Addons For Elementor – (Post Grid, Post Carousel, Post Slider, Category List, Post Tabs, Timeline, Post Ticker, Tag Cloud) <= 3.11.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Social Count (Static) Widget Exploitation status Not known exploited Fix Affected product U Ultimate Post Kit Addons for Elementor Published 06/28/2024 Severity Medium CVE-2024-3925Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.6.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via onclick events Exploitation status Not known exploited Fix Affected product E Element Pack – Widgets, Templates & Addons for Elementor Published 06/12/2024 Severity Medium CVE-2024-5640Prime Slider – Addons For Elementor (Revolution of a slider, Hero Slider, Ecommerce Slider) <= 3.14.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Pacific Widget Exploitation status Not known exploited Fix Affected product P Prime Slider – Addons for Elementor Published 06/07/2024 Severity Medium CVE-2024-33568WordPress Element Pack Pro plugin < 7.19.3 - Arbitrary File Read and Phar Deserialization vulnerability Exploitation status Not known exploited Fix Affected product E Element Pack Pro Published 06/04/2024 Severity High CVE-2024-3997Prime Slider – Addons For Elementor (Revolution of a slider, Hero Slider, Ecommerce Slider) <= 3.14.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Pagepiling Widget Exploitation status Not known exploited Fix Affected product P Prime Slider – Addons for Elementor Published 05/23/2024 Severity Medium CVE-2024-3926Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via custom_attributes Exploitation status Not known exploited Fix Affected product E Element Pack – Widgets, Templates & Addons for Elementor Published 05/22/2024 Severity Medium CVE-2024-3927Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.6.3 - Form Submission Admin Email Bypass Exploitation status Not known exploited Fix Affected product E Element Pack – Widgets, Templates & Addons for Elementor Published 05/22/2024 Severity Medium CVE-2024-4339Prime Slider – Addons For Elementor (Revolution of a slider, Hero Slider, Ecommerce Slider) <= 3.14.3 - Authenticated (Contributor+) Stored Cross-Site Scripting Exploitation status Not known exploited Fix Affected product P Prime Slider – Addons for Elementor Published 05/09/2024 Severity Medium CVE-2024-4606WordPress Ultimate Store Kit Elementor Addons, Woocommerce Builder, EDD Builder plugin <= 2.0.3 - PHP Object Injection vulnerability Exploitation status Not known exploited Fix Affected product U Ultimate Store Kit Elementor Addons Published 05/09/2024 Severity Medium CVE-2024-32681WordPress Prime Slider plugin <= 3.13.2 - Broken Access Control vulnerability Exploitation status Not known exploited Fix Affected product P Prime Slider – Addons for Elementor Published 04/22/2024 Severity Medium CVE-2024-32682WordPress Prime Slider plugin <= 3.13.2 - Broken Access Control vulnerability Exploitation status Not known exploited Fix Affected product P Prime Slider – Addons for Elementor Published 04/22/2024 Severity High CVE-2024-1730Prime Slider – Addons For Elementor (Revolution of a slider, Hero Slider, Media Slider, Drag Drop Slider, Video Slider, Product Slider, Ecommerce Slider) <= 3.14.0 - Authenticated (Contributor+) Stored Cross-Site Scripting Exploitation status Not known exploited Fix Affected product P Prime Slider – Addons for Elementor Published 04/20/2024 Severity Medium CVE-2024-32572WordPress Element Pack Elementor Addons plugin <= 5.6.0 - Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product E Element Pack Elementor Addons Published 04/18/2024 Severity Medium CVE-2024-1429Element Pack Elementor Addons (Header Footer, Free Template Library, Grid, Carousel, Table, Parallax Animation, Register Form, Twitter Grid) <= 5.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Panel Slider Widget Exploitation status Not known exploited Fix Affected product E Element Pack – Widgets, Templates & Addons for Elementor Published 04/18/2024 Severity Medium CVE-2024-1426Element Pack Elementor Addons (Header Footer, Free Template Library, Grid, Carousel, Table, Parallax Animation, Register Form, Twitter Grid) <= 5.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Price List Widget Exploitation status Not known exploited Fix Affected product E Element Pack – Widgets, Templates & Addons for Elementor Published 04/18/2024 Severity Medium CVE-2024-2966Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.5.6 - Sensitive Information Exposure via element_pack_ajax_search Exploitation status Not known exploited Fix Affected product E Element Pack – Widgets, Templates & Addons for Elementor Published 04/11/2024 Severity Medium CVE-2024-31357WordPress Ultimate Store Kit Elementor Addons plugin <= 1.5.2 - Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product U Ultimate Store Kit Elementor Addons Published 04/08/2024 Severity Medium CVE-2024-0837Element Pack Elementor Addons (Header Footer, Free Template Library, Grid, Carousel, Table, Parallax Animation, Register Form, Twitter Grid) <= 5.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'Custom Gallery' Widget Exploitation status Not known exploited Fix Affected product E Element Pack – Widgets, Templates & Addons for Elementor Published 04/06/2024 Severity Medium CVE-2024-1428Element Pack Elementor Addons (Header Footer, Free Template Library, Grid, Carousel, Table, Parallax Animation, Register Form, Twitter Grid) <= 5.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Trailer Box Widget Exploitation status Not known exploited Fix Affected product E Element Pack – Widgets, Templates & Addons for Elementor Published 04/06/2024 Severity Medium CVE-2024-30496WordPress Element Pack Lite plugin <= 5.5.3 - SQL Injection vulnerability Exploitation status Not known exploited Fix Affected product E Element Pack Elementor Addons Published 03/29/2024 Severity High CVE-2024-30186WordPress Prime Slider plugin <= 3.13.1 - Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product P Prime Slider – Addons for Elementor Published 03/27/2024 Severity Medium CVE-2024-30185WordPress Element Pack Elementor Addons plugin <= 5.5.3 - Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product E Element Pack Elementor Addons Published 03/27/2024 Severity Medium CVE-2024-24840WordPress Element Pack Elementor Addons plugin <= 5.4.11 - Broken Access Control on Duplicate Post vulnerability Exploitation status Not known exploited Fix Affected product E Element Pack Elementor Addons Published 03/23/2024 Severity Medium CVE-2024-24883WordPress Prime Slider plugin <= 3.11.10 - Broken Access Control on Duplicate Post vulnerability Exploitation status Not known exploited Fix Affected product P Prime Slider – Addons for Elementor Published 03/21/2024 Severity Medium CVE-2024-1508Prime Slider – Addons For Elementor <= 3.13.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Mercury Widget Exploitation status Not known exploited Fix Affected product P Prime Slider – Addons for Elementor Published 03/13/2024 Severity Medium CVE-2024-1507Prime Slider – Addons For Elementor <= 3.13.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Rubix Widget Exploitation status Not known exploited Fix Affected product P Prime Slider – Addons for Elementor Published 03/13/2024 Severity Medium CVE-2024-1506Prime Slider – Addons For Elementor <= 3.13.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Fiestar Widget Exploitation status Not known exploited Fix Affected product P Prime Slider – Addons for Elementor Published 03/07/2024 Severity Medium 
.svg){kind=icon}
.svg){kind=icon}
