Medium
CVE-2026-24958
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 2,089
Reset filters
Medium
CVE-2025-69336
Ultimate Store Kit Elementor Addons <= 2.9.4 - Missing Authorization
High
CVE-2025-69039
Bailly <= 1.3.4 - Unauthenticated Local File Inclusion
High
CVE-2025-69044
Vango <= 1.3.3 - Unauthenticated Local File Inclusion
Medium
CVE-2025-69013
Stratum Widgets for Elementor <= 1.6.1 - Missing Authorization
High
CVE-2025-68537
Zota <= 1.3.14 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2025-68590
Integration for Contact Form 7 HubSpot <= 1.4.2 - Authenticated (Administrator+) SQL Injection
High
CVE-2025-68546
Nika <= 1.2.14 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2025-68544
Diza <= 1.3.15 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2025-14635
Happy Addons for Elementor <= 3.20.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom JS
Medium
CVE-2025-14163
Premium Addons for Elementor <= 4.11.53 - Cross-Site Request Forgery via 'insert_inner_template'
Medium
CVE-2025-14155
Premium Addons for Elementor <= 4.11.53 - Missing Authorization to Unauthenticated Sensitive Information Exposure via 'get_template_content'
High
CVE-2025-68985
Aora <= 1.3.15 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2025-68981
HomeFix Elementor Portfolio <= 1.0.1 - Missing Authorization
Medium
CVE-2025-14277
Prime Slider – Addons for Elementor <= 4.0.9 - Authenticated (Subscriber+) Server-Side Request Forgery
Medium
CVE-2025-68532
ModelTheme Addons for WPBakery and Elementor < 1.5.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-13977
Essential Addons for Elementor – Popular Elementor Templates & Widgets <= 6.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-11220
Elementor <= 3.33.3 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Text Path
Medium
CVE-2026-24947
LA-Studio Element Kit for Elementor < 1.5.6.3 - Missing Authorization
High
CVE-2025-67530
Besa <= 2.3.15 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2025-67540
Animation Addons for Elementor <= 2.4.5 - Authenticated (Contributor+) Arbitrary Content Deletion
Medium
CVE-2025-12537
Addon Elements for Elementor <= 1.14.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-64244
Restrict Elementor Widgets, Columns and Sections <= 1.12 - Missing Authorization
Medium
CVE-2025-68500
Prime Slider – Addons For Elementor <= 4.0.10 - Authenticated (Subscriber+) Server-Side Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.