Medium
CVE-2025-13535
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 2,089
Reset filters
Medium
CVE-2026-40763
Royal Elementor Addons <= 1.7.1056 - Missing Authorization
Medium
CVE-2026-45214
Xpro Elementor Addons <= 1.5.1 - Authenticated (Contributor+) SQL Injection
Critical
CVE-2025-15488
Responsive Plus – Elementor Templates & Starter Sites < 3.4.3 - Unauthenticated Arbitrary Code Execution
Medium
CVE-2026-1206
Elementor Website Builder <= 3.35.7 - Incorrect Authorization to Authenticated (Contributor+) Sensitive Information Exposure via Elementor Template
Medium
CVE-2026-25007
ElementInvader Addons for Elementor <= 1.4.2 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2026-25398
Vertex Addons for Elementor <= 1.6.4 - Missing Authorization
Medium
CVE-2026-40745
Element Pack Elementor Addons <= 8.4.2 - Authenticated (Editor+) SQL Injection
Medium
CVE-2026-39500
themesflat-addons-for-elementor <= 2.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-13997
King Addons for Elementor <= 51.1.49 - Unauthenticated API Keys Disclosure
Medium
CVE-2025-6229
Sina Extension for Elementor (Slider, Gallery, Form, Modal, Data Table, Tab, Particle, Free Elementor Widgets & Elementor Templates) <= 3.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via `Fancy Text Widget` And `Countdown Widget`
Medium
CVE-2026-1397
PQ Addons – Creative Elementor Widgets <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Widget Attributes
Medium
CVE-2026-25304
Jaroti < 1.4.8 - Reflected Cross-Site Scripting
Medium
CVE-2026-25350
Miti < 1.5.3 - Reflected Cross-Site Scripting
Medium
CVE-2026-25349
Loobek < 1.5.2 - Reflected Cross-Site Scripting
Medium
CVE-2026-32527
WP Insightly for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms <= 1.1.5 - Missing Authorization
Medium
CVE-2026-25354
Reebox < 1.4.8 - Reflected Cross-Site Scripting
Medium
CVE-2026-32515
Miraculous - Multi Vendor Online Music Store Elementor WordPress Theme < 2.1.2 - Missing Authorization
Medium
CVE-2026-25356
Yobazar < 1.6.7 - Reflected Cross-Site Scripting
Medium
CVE-2026-42644
BetterDocs <= 4.3.10 - Unauthenticated Information Exposure
Medium
CVE-2026-24362
Ultimate Post Kit Addons for Elementor <= 4.0.21 - Missing Authorization
Medium
CVE-2026-25430
Integration for Mailchimp and Contact Form 7, WPForms, Elementor, Ninja Forms <= 1.2.2 - Missing Authorization
Medium
CVE-2026-2373
Royal Addons for Elementor – Addons and Templates Kit for Elementor <= 1.7.1049 - Missing Authorization to Unauthenticated Custom Post Type Contents Exposure
Medium
CVE-2026-32462
Master Addons For Elementor – Widgets, Extensions, Theme Builder, Popup Builder & Template Kits <= 2.1.3 - Authenticated (Author+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.