Medium
CVE-2025-9082
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 2,089
Reset filters
High
CVE-2025-14610
TableMaster for Elementor <= 1.3.6 - Authenticated (Author+) Server-Side Request Forgery via 'csv_url' Parameter
High
CVE-2025-68531
ModelTheme Addons for WPBakery and Elementor < 1.5.6 - Authenticated (Contributor+) PHP Object Injection
Medium
CVE-2025-14973
Recipe Card Blocks for Gutenberg & Elementor < 3.4.13 - Authenticated (Contributor+) SQL Injection
High
CVE-2026-24390
Kentha Elementor Widgets < 3.1 - Authenticated (Contributor+) Local File Inclusion
Low
CVE-2026-0633
MetForm – Contact Form, Survey, Quiz, & Custom Form Builder for Elementor <= 4.1.0 - Unauthenticated Form Submission Exposure via Forgeable Cookie Value
Medium
CVE-2025-68999
Happy Addons for Elementor <= 3.20.4 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2026-24559
Integration for Contact Form 7 HubSpot <= 1.4.3 - Authenticated (Subscriber+) Information Exposure
Critical
CVE-2026-0920
LA-Studio Element Kit for Elementor <= 1.5.6.3 - Unauthenticated Privilege Escalation via Backdoor to Administrative User Creation via lakit_bkrole parameter
High
CVE-2025-67947
AdForest Elementor <= 3.0.11 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2025-68046
Contact Form & Lead Form Elementor Builder <= 2.0.1 - Authenticated (Subscriber+) Information Exposure
High
CVE-2025-69312
Xpro Elementor Addons <= 1.4.19.1 - Authenticated (Author+) Arbitrary File Upload
Medium
CVE-2025-69300
Premium Addons for Elementor <= 4.11.63 - Missing Authorization to Authenticated (Subscriber+) Settings Update
Medium
CVE-2025-31413
Element Pack Elementor Addons <= 8.3.13 - Cross-Site Request Forgery
Medium
CVE-2026-24386
Element Invader – Template Kits for Elementor <= 1.2.4 - Missing Authorization
Medium
CVE-2026-1004
Essential Addons for Elementor <= 6.5.5 - Missing Authorization to Unauthenticated Sensitive Information Exposure
Medium
CVE-2026-24605
X Addons for Elementor <= 1.0.23 - Missing Authorization
High
CVE-2026-40721
Element Pack Pro <= 9.0.6 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2025-67620
Anon <= 2.2.10 - Reflected Cross-Site Scripting
Medium
CVE-2025-69363
Responsive Addons for Elementor <= 2.0.8 - Missing Authorization
Medium
CVE-2025-69362
UiChemy <= 4.4.2 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2025-66143
Crumber <= 1.0.10 - Missing Authorization
Medium
CVE-2025-69357
TheGem Theme Elements (for Elementor) <= 5.11.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2025-69356
TheGem Theme Elements (for Elementor) <= 5.11.0 - Authenticated (Contributor+) Local File Inclusion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.