Medium
CVE-2026-13710
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 2,089
Reset filters
High
CVE-2026-13347
Hide My WP Lite <= 1.3 - Unauthenticated Path Traversal to Arbitrary File Read via 'he_wrapper_js' Parameter
High
CVE-2026-57718
Unlimited Elements For Elementor <= 2.0.12 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2026-6459
Essential Addons for Elementor <= 6.6.2 - Authenticated (Author+) Stored Cross-Site Scripting via Event Calendar Widget Popup
Medium
CVE-2026-10570
Sympl Repeater for ACF and Elementor <= 2.3 - Authenticated (Author+) Stored Cross-Site Scripting via ACF Repeater Field Values
High
CVE-2026-57376
ElementInvader Addons for Elementor <= 1.4.3 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2026-14870
Database for Contact Form 7, WPforms, Elementor forms <= 1.5.2 - Reflected Cross-Site Scripting
Medium
CVE-2026-11328
Exclusive Addons for Elementor <= 2.7.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Title
Medium
CVE-2026-14190
Sina Extension for Elementor <= 3.10.1 - Reflected Cross-Site Scripting
Medium
CVE-2026-59511
Exclusive Addons for Elementor <= 2.7.9.9 - Unauthenticated Information Exposure
Medium
CVE-2026-5137
RTMKit <= 2.0.7 - Authenticated (Contributor+) Limited Local File Inclusion via 'template' Parameter
Medium
CVE-2026-8351
RTMKit <= 2.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Advanced Heading Widget 'Background Text' Parameter
High
CVE-2026-57790
Billey <= 2.1.8 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2026-57804
TheGem Theme Elements <= 5.11.1 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2026-9145
Database for Contact Form 7, WPforms, Elementor forms <= 1.5.1 - Unauthenticated Arbitrary File Copy/Upload via Elementor Pro Form Upload Field 'raw_value'
Medium
CVE-2026-11600
Envo's Templates & Widgets for Elementor and WooCommerce <= 1.4.26 - Missing Authorization to Authenticated (Author+) Private Content Disclosure via Envo Tabs Widget 'templates' Setting
Medium
CVE-2026-11380
JetWidgets For Elementor <= 1.0.21 - Authenticated (Author+) Stored Cross-Site Scripting via Animated Box 'animation_effect' Setting
High
CVE-2026-11767
CRT Addons for Elementor <= 1.6.6 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2026-10081
Unlimited Elements for Elementor <= 2.0.10 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2026-8825
Elementor <= 4.1.3 - Authenticated (Contributor+) Sensitive Information Exposure
Medium
CVE-2026-57620
Exclusive Addons for Elementor <= 2.7.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-63079
Live Copy Paste for Elementor – Cross Domain Copy Paste & Page Duplicator <= 1.5.6 - Missing Authorization
Medium
CVE-2026-13402
Royal Elementor Addons <= 1.7.1062 - Unauthenticated Information Exposure
Medium
CVE-2026-57619
Elementor Website Builder – more than just a page builder <= 4.1.3 - Authenticated (Contributor+) Sensitive Information Exposure
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.