High
CVE-2025-68560
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 2,089
Reset filters
Medium
CVE-2025-64211
Masterstudy Elementor Widgets <= 1.2.4 - Missing Authorization
Medium
CVE-2025-68559
TheGem Theme Elements (for Elementor) <= 5.10.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-64210
Masterstudy Elementor Widgets <= 1.2.4 - Missing Authorization
High
CVE-2025-62041
TheGem (Elementor) <= 5.10.5.1 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2025-62923
Marquee Addons for Elementor <= 3.8.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-9029
WDesignKit – Elementor & Gutenberg Starter Templates, Patterns, Cloud Workspace & Widget Builder <= 1.2.16 - Missing Authentication via wdkit_handle_review_submission Function
Medium
CVE-2025-9978
Jeg Kit for Elementor – Powerful Elementor Addons, Widgets & Templates for WordPress < 2.6.9 - Authenticated (Author+) Stored Cross-Site Scripting via SVG
Medium
CVE-2025-9204
X Addons for Elementor <= 1.0.16 - Authenticated (Contributor+) Stored Cross-Site Scripting via Youtube Video ID Field
Medium
CVE-2025-9045
Easy Elementor Addons <= 2.2.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-9077
Ultra Addons Lite for Elementor <= 1.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Animated Text Field
Medium
CVE-2025-9080
Generic Elements <= 1.2.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-8608
Mihdan: Elementor Yandex Maps <= 1.6.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via Marker Pins
Medium
CVE-2025-8214
The Pack Elementor addon <= 2.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Typing Letter Widget
Medium
CVE-2025-60167
Page Manager for Elementor <= 2.0.5 - Authenticated (Subscriber+) Sensitive Information Exposure
Medium
CVE-2025-60096
TheGem (Elementor) <= 5.10.5 - Missing Authorization
Medium
CVE-2025-60112
aThemes Addons for Elementor <= 1.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-60097
TheGem <= 5.10.5 - Missing Authorization
Low
CVE-2025-10173
ShopEngine Elementor WooCommerce Builder Addon – All in One WooCommerce Solution <= 4.8.3 - Insufficient Authorization to Authenticated (Editor+) Settings Update
Medium
CVE-2025-8200
Mega Elements – Addons for Elementor <= 1.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Timer Widget
High
CVE-2025-59007
TF Woo Product Grid Addon For Elementor <= 1.0.1 - Unauthenticated PHP Object Injection
Medium
CVE-2025-9698
The Plus Addons for Elementor <= 6.3.15 - Authenticated (Author+) Stored Cross-Site Scripting via SVG
Medium
CVE-2025-57995
DethemeKit For Elementor <= 2.1.10 - Missing Authorization
Medium
CVE-2025-58254
StylePress for Elementor <= 1.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.