High
CVE-2026-95534
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 2,089
Reset filters
Medium
CVE-2026-103344
Unlimited Elements for Elementor <= 2.0.20 - Reflected Cross-Site Scripting
High
CVE-2026-94662
Unlimited Elements for Elementor <= 2.0.19 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2026-103342
Unlimited Elements for Elementor <= 2.0.20 - Reflected Cross-Site Scripting
Medium
CVE-2026-102394
Essential Addons for Elementor – Popular Elementor Templates & Widgets <= 6.8.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-103339
MetForm – Contact Form, Survey, Quiz, Conditional Forms, Form Templates & Custom Form Builder for Elementor <= 4.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-103063
ElementsKit Elementor Addons – Advanced Widgets & Templates Addons for Elementor <= 4.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-103064
ElementsKit Elementor Addons – Advanced Widgets & Templates Addons for Elementor <= 4.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-103341
Unlimited Elements for Elementor <= 2.0.20 - Missing Authorization
Medium
CVE-2026-103338
Unlimited Elements for Elementor <= 2.0.20 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2026-103082
LA-Studio Element Kit for Elementor <= 1.6.2 - Authenticated (Contributor+) Server-Side Request Forgery
Medium
CVE-2026-92923
Unlimited Elements For Elementor 1.5.142 - 2.0.20 - Authenticated (Subscriber+) SQL Injection
High
CVE-2026-85015
Unlimited Elements For Elementor <= 2.0.20 - Authenticated (Admin+) Arbitrary File Write
Medium
CVE-2026-86832
MetForm <= 4.3.0 - Unauthenticated Information Exposure
High
CVE-2026-85568
Unlimited Elements For Elementor 1.5.139 - 2.0.20 - Unauthenticated SQL Injection
Medium
CVE-2026-86833
MetForm <= 4.3.0 - Unauthenticated Arbitrary HTML Injection in Notification Emails
Medium
CVE-2026-86834
MetForm 2.2.1 - 4.3.0 - Unauthenticated Information Exposure
High
CVE-2026-100507
If-So Dynamic Content – Elementor & All Page Builders Personalization <= 1.10.1 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2026-62080
HappyAddons for Elementor – 160 Elementor Widgets, GSAP Animations & Templates <= 3.23.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-85016
Unlimited Elements For Elementor <= 2.0.20 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-92924
Unlimited Elements For Elementor <= 2.0.20 - Authenticated (Subscriber+) Arbitrary Shortcode Execution
Medium
CVE-2026-97298
King Addons for Elementor – 100+ Elementor Widgets, 4 000+ Elementor Templates, WooCommerce Builder, Mega Menu, Popup Builder <= 51.1.86 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-62078
Premium Addons for Elementor – AI-Ready Elementor Addons, Widgets & Templates <= 4.11.105 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-97301
Cool FormKit Lite – Advanced Form Builder for Elementor <= 2.7.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.