CVE-2026-39516WordPress Nexter Blocks plugin <= 4.7.0 - Sensitive Data Exposure vulnerability Exploitation status Not known exploited Fix Affected product N Nexter Blocks Published 04/08/2026 Severity Medium CVE-2024-50452WordPress Nexter Blocks plugin <= 3.3.3 - Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product N Nexter Blocks Published 02/20/2026 Severity Medium CVE-2026-24377WordPress Nexter Blocks plugin <= 4.6.3 - Sensitive Data Exposure vulnerability Exploitation status Not known exploited Fix Affected product N Nexter Blocks Published 01/22/2026 Severity Medium CVE-2025-69362WordPress UiChemy plugin <= 4.4.2 - Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product U UiChemy Published 01/06/2026 Severity Medium CVE-2024-23511WordPress The Plus Addons for Elementor plugin <= 5.3.3 - Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product T The Plus Addons for Elementor Page Builder Lite Published 01/05/2026 Severity Medium CVE-2025-62013WordPress UiChemy plugin <= 4.0.0 - Broken Access Control vulnerability Exploitation status Not known exploited Fix Affected product U UiChemy Published 10/22/2025 Severity Medium CVE-2025-58251WordPress Sticky Header Effects for Elementor Plugin <= 2.1.2 - Broken Access Control Vulnerability Exploitation status Not known exploited Fix Affected product S Sticky Header Effects for Elementor Published 09/22/2025 Severity Medium CVE-2025-54739WordPress Nexter Blocks Plugin <= 4.5.4 - Broken Access Control Vulnerability Exploitation status Not known exploited Fix Affected product N Nexter Blocks Published 08/14/2025 Severity Medium CVE-2025-55712WordPress The Plus Addons for Elementor Page Builder Lite Plugin <= 6.3.13 - Broken Access Control Vulnerability Exploitation status Not known exploited Fix Affected product T The Plus Addons for Elementor Page Builder Lite Published 08/14/2025 Severity Medium CVE-2025-49076WordPress The Plus Addons for Elementor Page Builder Lite plugin <= 6.2.7 - Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product T The Plus Addons for Elementor Page Builder Lite Published 06/06/2025 Severity Medium CVE-2025-1287The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 6.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets Exploitation status Not known exploited Fix Affected product T The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce Published 03/08/2025 Severity Medium CVE-2024-11829The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 6.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting Exploitation status Not known exploited Fix Affected product T The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce Published 02/01/2025 Severity Medium CVE-2024-56294WordPress Nexter Blocks plugin <= 4.0.7 - Broken Access Control vulnerability Exploitation status Not known exploited Fix Affected product N Nexter Blocks Published 01/07/2025 Severity Medium CVE-2024-56246WordPress Nexter Blocks plugin <= 4.0.4 - Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product N Nexter Blocks Published 01/02/2025 Severity Medium CVE-2024-53823WordPress The Plus Addons for Elementor plugin <= 5.6.14 - Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product T The Plus Addons for Elementor Page Builder Lite Published 12/06/2024 Severity Medium CVE-2024-53811WordPress WDesignKit plugin <= 1.0.40 - Arbitrary File Upload vulnerability Exploitation status Not known exploited Fix Affected product W WDesignkit Published 12/06/2024 Severity Medium CVE-2024-10365The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 6.0.3 - Authenticated (Contributor+) Sensitive Information Exposure via Elementor Templates Exploitation status Not known exploited Fix Affected product T The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce Published 11/20/2024 Severity Medium CVE-2024-43932WordPress The Plus Addons for Elementor plugin <= 5.6.2 - Broken Access Control vulnerability Exploitation status Not known exploited Fix Affected product T The Plus Addons for Elementor Page Builder Lite Published 11/01/2024 Severity Medium CVE-2024-8913The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 5.6.11 - Authenticated (Contributor+) Sensitive Information Exposure via content_template Exploitation status Not known exploited Fix Affected product T The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce Published 10/11/2024 Severity Medium CVE-2024-43977WordPress The Plus Addons for Elementor plugin <= 5.6.2 - Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product T The Plus Addons for Elementor Page Builder Lite Published 09/17/2024 Severity Medium CVE-2024-5583The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 5.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Testimonials Widget Settings Exploitation status Not known exploited Fix Affected product T The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce Published 08/22/2024 Severity Medium CVE-2024-6575The Plus Addons for Elementor <= 5.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via TP Page Scroll Widget Exploitation status Not known exploited Fix Affected product T The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce Published 08/20/2024 Severity Medium CVE-2024-5763The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 5.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Video Widget Exploitation status Not known exploited Fix Affected product T The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce Published 08/20/2024 Severity Medium CVE-2024-4482The Plus Addons for Elementor <= 5.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget Exploitation status Not known exploited Fix Affected product T The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce Published 07/03/2024 Severity Medium CVE-2024-4983The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 5.6.0- Authenticated (Contributor+) Stored Cross-Site Scripting Exploitation status Not known exploited Fix Affected product T The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce Published 06/27/2024 Severity Medium CVE-2024-5455The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 5.5.6 - Authenticated (Contributor+) Local File Inclusion Exploitation status Not known exploited Fix Affected product T The Plus Addons for Elementor Page Builder Pro Published 06/21/2024 Severity High CVE-2024-5344The Plus Addons for Elementor Page Builder <= 5.5.6 - Reflected Cross-Site Scripting via WP Login and Register Widget Exploitation status Not known exploited Fix Affected product T The Plus Addons for Elementor Page Builder Pro Published 06/21/2024 Severity Medium CVE-2023-45658WordPress Nexter theme <= 2.0.3 - Broken Access Control vulnerability Exploitation status Not known exploited Fix Affected product N Nexter Published 06/19/2024 Severity High CVE-2024-33572WordPress Nexter Blocks plugin <= 3.2.5 - Broken Access Control vulnerability Exploitation status Not known exploited Fix Affected product N Nexter Blocks Published 06/09/2024 Severity Medium CVE-2024-35709WordPress The Plus Addons for Elementor plugin <= 5.5.4 - Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product T The Plus Addons for Elementor Page Builder Lite Published 06/08/2024 Severity Medium CVE-2024-5341The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 5.5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Heading Title Widget Exploitation status Not known exploited Fix Affected product T The Plus Addons for Elementor Page Builder Pro Published 05/30/2024 Severity Medium CVE-2024-4484The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 5.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting Exploitation status Not known exploited Fix Affected product T The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce Published 05/24/2024 Severity Medium CVE-2024-4485The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 5.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting Exploitation status Not known exploited Fix Affected product T The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce Published 05/24/2024 Severity Medium CVE-2024-3718The Plus Addons for Elementor <= 5.5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Progress Bar, Header Meta Content, Scroll Navigation, Pricing Table, & Flip Box Exploitation status Not known exploited Fix Affected product T The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce Published 05/24/2024 Severity Medium CVE-2024-2784The Plus Addons for Elementor <= 5.5.4 - Authenticated (Contibutor+) Stored Cross-Site Scripting via Hover Card Exploitation status Not known exploited Fix Affected product T The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce Published 05/24/2024 Severity Medium CVE-2023-47178WordPress The Plus Addons for Elementor Pro plugin <= 5.2.8 - Unauthenticated Local File Inclusion vulnerability Exploitation status Public exploit Fix Affected product T The Plus Addons for Elementor Pro Published 05/17/2024 Severity High CVE-2024-2785The Plus Addons for Elementor <= 5.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Age Gate Exploitation status Not known exploited Fix Affected product T The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce Published 05/09/2024 Severity Medium CVE-2024-0445The Plus Addons for Elementor <= 5.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting Exploitation status Not known exploited Fix Affected product T The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce Published 05/09/2024 Severity Medium CVE-2024-34373WordPress The Plus Addons for Elementor plugin <= 5.4.2 - Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product T The Plus Addons for Elementor Page Builder Lite Published 05/06/2024 Severity Medium CVE-2024-3197The Plus Addons for Elementor <= 5.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Attributes Exploitation status Not known exploited Fix Affected product T The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce Published 05/02/2024 Severity Medium CVE-2024-3199The Plus Addons for Elementor <= 5.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget Exploitation status Not known exploited Fix Affected product T The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce Published 05/02/2024 Severity Medium CVE-2024-30435WordPress Nexter Blocks plugin <= 3.2.5 - Reflected Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product N Nexter Blocks Published 03/29/2024 Severity High CVE-2024-2203The Plus Addons for Elementor <= 5.4.1 - Authenticated (Contributor+) Local File Inclusion via Clients Widget Exploitation status Not known exploited Fix Affected product T The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce Published 03/27/2024 Severity Medium CVE-2024-2210The Plus Addons for Elementor <= 5.4.1 - Authenticated (Contributor+) Local File Inclusion via Team Member Listing Exploitation status Not known exploited Fix Affected product T The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce Published 03/27/2024 Severity Medium CVE-2024-1419The Plus Addons for Elementor <= 5.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting Header Meta Content Widget Exploitation status Not known exploited Fix Affected product T The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce Published 03/07/2024 Severity Medium CVE-2023-45751WordPress Nexter Extension Plugin <= 2.0.3 is vulnerable to Remote Code Execution (RCE) Exploitation status Not confirmed Fix Affected product N Nexter Extension Published 12/29/2023 Severity Critical CVE-2023-45657WordPress Nexter Theme <= 2.0.3 is vulnerable to SQL Injection Exploitation status Not known exploited Fix Affected product N Nexter Published 11/06/2023 Severity Critical CVE-2023-45750WordPress Nexter Extension Plugin <= 2.0.3 is vulnerable to Cross Site Scripting (XSS) Exploitation status Not known exploited Fix Affected product N Nexter Extension Published 10/24/2023 Severity High CVE-2021-4332The Plus Addons for Elementor PRO <= 4.1.9 & The Plus Addons for Elementor <= 2.0.6 - Authenticated (Contributor+) Arbitrary File Read Exploitation status Not known exploited Fix Affected product T The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce Published 03/07/2023 Severity Medium CVE-2021-4331The Plus Addons for Elementor PRO <= 4.1.9 & The Plus Addons for Elementor <= 2.0.6 - Authenticated (Contributor+) Privilege Escalation Exploitation status Not known exploited Fix Affected product T The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce Published 03/07/2023 Severity High CVE-2021-24948The Plus Addons for Elementor Pro < 5.0.7 - Sensitive Data Disclosure Exploitation status Not confirmed Fix Affected product T The Plus Addons for Elementor - Pro Published 01/10/2022 Severity Unknown CVE-2021-24949The Plus Addons for Elementor Pro < 5.0.7 - Unauthenticated SQL Injection Exploitation status Not confirmed Fix Affected product T The Plus Addons for Elementor - Pro Published 01/10/2022 Severity Unknown CVE-2021-24358The Plus Addons for Elementor Page Builder < 4.1.10 - Open Redirect Exploitation status Not confirmed Fix Affected product T The Plus Addons for Elementor Page Builder Published 06/14/2021 Severity Unknown CVE-2021-24359The Plus Addons for Elementor Page Builder < 4.1.11 - Arbitrary Reset Pwd Email Sending Exploitation status Not confirmed Fix Affected product T The Plus Addons for Elementor Page Builder Published 06/14/2021 Severity Unknown CVE-2021-24351The Plus Addons for Elementor < 4.1.12 - Reflected Cross-Site Scripting (XSS) Exploitation status Not confirmed Fix Affected product T The Plus Addons for Elementor Page Builder Published 06/14/2021 Severity Unknown CVE-2021-24266The Plus Addons for Elementor Page Builder Lite < 2.0.6 - Contributor+ Stored XSS Exploitation status Not confirmed Fix Affected product T The Plus Addons for Elementor Page Builder Lite Published 05/05/2021 Severity Unknown CVE-2021-24175The Plus Addons for Elementor Page Builder < 4.1.7 - Authentication Bypass Exploitation status Not confirmed Fix Affected product T The Plus Addons for Elementor Page Builder Published 04/05/2021 Severity Unknown 
