Medium
CVE-2025-8199
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 2,089
Reset filters
Medium
CVE-2025-8687
Enter Addons <= 2.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown and Image Comparison Widgets
Medium
CVE-2025-8779
All-in-One Addons for Elementor – WidgetKit <= 2.5.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Team and Countdown Widgets
Medium
CVE-2025-14278
HT Slider for Elementor <= 1.7.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-8195
JetWidgets For Elementor <= 1.0.20 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Comparison and Subscribe Widgets
High
CVE-2025-67524
Jobmonster Elementor Addon <= 1.1.4 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2025-24569
PDF Generator Addon for Elementor Page Builder <= 1.7.5 - Unauthenticated Path Traversal
Medium
CVE-2025-7960
King Addons for Elementor <= 51.1.53 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets
Medium
CVE-2025-13456
Shopbuilder <= 3.2.1 - Reflected Cross-Site Scripting
Medium
CVE-2025-12965
Magical Posts Display <= 1.2.54 - Authenticated (Author+) Stored Cross-Site Scripting via Magical Posts Accordion Widget
Medium
CVE-2025-12830
Better Elementor Addons <= 1.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Slider Widget
Medium
CVE-2025-66161
Grider for Elementor <= 1.0.8 - Missing Authorization
Medium
CVE-2025-68088
Huger for Elementor <= 1.1.5 - Missing Authorization
Medium
CVE-2025-68086
Reformer for Elementor <= 1.0.6 - Missing Authorization
Medium
CVE-2025-68085
Buttoner for Elementor <= 1.0.6 - Missing Authorization to Authenticated (Subscriber+) Settings Change
Medium
CVE-2025-68087
Modalier for Elementor <= 1.0.6 - Missing Authorization
Medium
CVE-2025-66162
Spoter for Elementor <= 1.04 - Missing Authorization
Medium
CVE-2025-66163
Masker for Elementor <= 1.1.4 - Missing Authorization
Medium
CVE-2025-66166
Lottier for Elementor <= 1.0.9 - Missing Authorization
Medium
CVE-2025-66138
Motionger for Elementor <= 2.0.4 - Missing Authorization
Medium
CVE-2025-66137
Searcher for Elementor <= 1.0.3 - Missing Authorization
Medium
CVE-2025-14434
Ultimate Post Kit <= 4.0.15 - Unauthenticated Information Disclosure
Medium
CVE-2025-66139
Audier For Elementor <= 1.0.9 - Missing Authorization
Medium
CVE-2025-66142
Comparimager for Elementor <= 1.0.1 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.