Medium
CVE-2026-62079
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 2,089
Reset filters
Medium
CVE-2026-11895
HT Mega Addons for Elementor <= 3.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Data Table 'display_options' Setting
Medium
CVE-2026-87970
If-So Dynamic Content 1.8 - 1.10.1 - Reflected Cross-Site Scripting
Medium
CVE-2026-87973
If-So Dynamic Content 1.9.9 - 1.10.1 - Authenticated (Editor+) Stored Cross-Site Scripting
Medium
CVE-2026-90953
Image Optimizer by Elementor <= 1.7.6 - Authenticated (Subscriber+) Information Exposure
High
CVE-2026-62062
Elementor Website Builder 4.3.0 - 4.3.1 - Cross-Site Request Forgery via REST Nonce Bypass to Privilege Escalation
High
CVE-2026-94573
Repeater Fields for Elementor Forms <= 2.2.7 - Unauthenticated Stored Cross-Site Scripting via Repeater Field Value
Medium
CVE-2026-96835
King Addons for Elementor – 100+ Elementor Widgets, 4 000+ Elementor Templates, WooCommerce Builder, Mega Menu, Popup Builder <= 51.1.85 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-96829
The Plus Addons for Elementor – Mega Menu, Header Footer, Post Grid, AI Widgets & Templates <= 6.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-94680
The Post Grid – Shortcode, Gutenberg Blocks and Elementor Addon for Post Grid <= 7.9.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-94168
Premium Addons for Elementor – AI-Ready Elementor Addons, Widgets & Templates <= 4.11.105 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-94500
ElementsKit Elementor Addons – Advanced Widgets & Templates Addons for Elementor <= 4.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-93527
Live Copy Paste for Elementor – Cross Domain Copy Paste & Page Duplicator <= 1.5.10 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2026-94671
The Post Grid – Shortcode, Gutenberg Blocks and Elementor Addon for Post Grid <= 7.9.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-84151
The Post Grid <= 7.9.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-85006
Happy Addons for Elementor <= 3.49.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-8354
Gum Addon for Elementor <= 1.3.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'pop_tag' Widget Setting
Medium
CVE-2026-1641
Wow Elements Addons for Elementor <= 1.11.2 - Authenticated (Contributor+) Server-Side Request Forgery via Changelog File Setting
High
CVE-2026-85017
Unlimited Elements For Elementor <= 2.0.19 - Authenticated (Subscriber+) PHP Object Injection
High
CVE-2026-18405
Jeg Kit for Elementor <= 3.2.16 - Unauthenticated Stored Cross-Site Scripting via Comment Content
High
CVE-2026-83561
Complianz GDPR/CCPA Cookie Consent Banner <= 7.5.4 - Unauthenticated Stored Cross-Site Scripting via Elementor Cookie Blocker Regex
High
CVE-2026-85410
Master Addons for Elementor <= 3.2.2 - Missing Authorization to Authenticated (Contributor+) Arbitrary Post Modification/Deletion via 'popup_id' Parameter
Medium
CVE-2026-92249
Qi Addons For Elementor <= 1.11 - Reflected DOM-Based Cross-Site Scripting via 's' Parameter
Medium
CVE-2026-15650
RT Mega Menu <= 1.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'pointer_menu_item' Block Attribute
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.