Medium
CVE-2026-32352
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 2,089
Reset filters
Medium
CVE-2026-39626
Armania <= 1.4.8 - Unauthenticated Arbitrary Shortcode Execution
High
CVE-2025-68536
Zota <= 1.3.14 - Unauthenticated Local File Inclusion
High
CVE-2025-68545
Nika <= 1.2.14 - Unauthenticated Local File Inclusion
High
CVE-2025-68543
Diza <= 1.3.15 - Unauthenticated Local File Inclusion
High
CVE-2026-24956
Download Manager Addons for Elementor <= 1.3.0 - Unauthenticated SQL Injection
Medium
CVE-2026-22350
PDF for Elementor Forms + Drag And Drop Template Builder <= 6.3.1 - Missing Authorization
Medium
CVE-2026-2295
WPZOOM Addons for Elementor – Starter Templates & Widgets <= 1.3.2 - Unauthenticated Protected Post Exposure via ajax_post_grid_load_more
High
CVE-2025-67998
Miraculous Elementor <= 2.0.7 - Authenticated (Subscriber+) Privilege Escalation
High
CVE-2025-69382
Themesflat Elementor <= 1.0.1 - Unauthenticated PHP Object Injection
Medium
CVE-2026-25028
ElementInvader Addons for Elementor <= 1.4.1 - Missing Authorization
High
CVE-2025-69375
Portfolio Builder <= 1.2.5 - Unauthenticated Local File Inclusion
High
CVE-2025-69374
Eleblog – Elementor Blog And Magazine Addons <= 2.0.3 - Unauthenticated Local File Inclusion
High
CVE-2025-68841
TopperPack – Complete Elementor Addons, Theme & CPT Builder <= 1.2.1 - Unauthenticated Local File Inclusion
High
CVE-2025-67981
Besa <= 2.3.15 - Unauthenticated Local File Inclusion
Medium
CVE-2026-1210
Happy Addons for Elementor <= 3.20.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via '_elementor_data' Meta Field
Medium
CVE-2025-14274
Unlimited Elements for Elementor <= 2.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Border Hero Widget
Medium
CVE-2026-25416
News Kit Addons For Elementor <= 1.4.2 - Missing Authorization
Medium
CVE-2026-25014
Enter Addons <= 2.3.2 - Cross-Site Request Forgery
Medium
CVE-2026-25320
FormsDB – Save Elementor Forms to Google Sheets & Post Type <= 2.1.3 - Missing Authorization
Medium
CVE-2026-25319
Zita Site Library for Elementor <= 1.6.6 - Cross-Site Request Forgery
Medium
CVE-2026-1310
Simple calendar for Elementor <= 1.6.6 - Missing Authorization to Unauthenticated Arbitrary Calendar Entry Deletion
Medium
CVE-2025-12709
Interactions – Create Interactive Experiences in the Block Editor <= 1.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-0825
Database for Contact Form 7, WPforms, Elementor forms <= 1.4.5 - Missing Authorization to Unauthenticated Form Data Exfiltration via CSV Export
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.