Medium
CVE-2025-54033
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 2,089
Reset filters
Medium
CVE-2025-53982
JetElements For Elementor <= 2.7.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-48295
Easy Elementor Addons <= 2.2.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-53989
JetBlocks For Elementor <= 1.3.19 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-46434
The Plus Addons for Elementor Pro < 6.3.7 - Missing Authorization
Medium
CVE-2025-53983
JetElements For Elementor <= 2.7.7 - Authenticated (Subscriber+) Information Disclosure
Medium
CVE-2025-54037
News Kit Elementor Addons <= 1.3.4 - Missing Authorization
Medium
CVE-2025-54050
Responsive Addons for Elementor <= 1.7.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-53988
JetBlocks For Elementor <= 1.3.18 - Authenticated (Subscriber+) Information Disclsoure
Medium
CVE-2025-5284
Master Addons – Elementor Addons with White Label, Free Widgets, Hover Effects, Conditions, & Animations <= 2.0.8.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2025-7340
HT Contact Form Widget For Elementor Page Builder & Gutenberg Blocks & Form Builder. <= 2.2.1 - Unauthenticated Arbitrary File Upload
Critical
CVE-2025-7360
HT Contact Form Widget For Elementor Page Builder & Gutenberg Blocks & Form Builder. <= 2.2.1 - Directory Traversal to Arbitrary File Move
Critical
CVE-2025-7341
HT Contact Form Widget For Elementor Page Builder & Gutenberg Blocks & Form Builder. <= 2.2.1 - Unauthenticated Arbitrary File Deletion
High
CVE-2025-59558
Billey < 2.1.6 - Unauthenticated Local File Inclusion
Medium
CVE-2025-6244
Essential Addons for Elementor – Popular Elementor Templates and Widgets <= 6.1.19 - Authenticated (Contributor+) Stored Cross-Site Scripting via `Calendar` And `Business Reviews` Widgets
Medium
CVE-2024-11937
Premium Addons for Elementor <= 4.10.69 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-7046
Portfolio for Elementor & Image Gallery | PowerFolio <= 3.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom JS
High
CVE-2025-23968
Graphina <= 3.1.1 - Unauthenticated Local File Inclusion
Medium
CVE-2025-5944
Element Pack Addons for Elementor <= 8.0.0 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via data-caption Attribute
Medium
CVE-2024-5647
Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Magnific Popups JavaScript Library
Medium
CVE-2025-2330
All-in-One Addons for Elementor – WidgetKit <= 2.5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via button+modal Widget
Medium
CVE-2025-6686
Magic Buttons for Elementor <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via magic-button Shortcode
Medium
CVE-2025-6687
Magic Buttons for Elementor <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via magic-button Shortcode
High
CVE-2025-52729
Diza <= 1.3.9 - Unauthenticated Local File Inclusion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.