Medium
CVE-2025-6251
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 2,089
Reset filters
Medium
CVE-2025-63026
Grand Restaurant Theme Elements for Elementor <= 2.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-23543
Essential Addons for Elementor <= 6.5.5 - Missing Authorization
Medium
CVE-2025-13196
Element Pack Addons for Elementor <= 8.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Open Street Map widget
Medium
CVE-2025-8609
RTMKit Addons <= 1.6.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Accordion Repeater Block Attribute
Medium
CVE-2025-11997
Document Pro Elementor – Documentation & Knowledge Base <= 1.0.9 - Unauthenticated Information Exposure
Medium
CVE-2025-12837
aThemes Addons for Elementor <= 1.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Call To Action Widget
Medium
CVE-2025-64355
JetElements For Elementor <= 2.7.12 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-11820
Graphina – Elementor Charts and Graphs <= 3.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Chart Widgets
High
CVE-2025-10896
Multiple Plugins <= Multiple Versions - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Upload
Critical
CVE-2025-12493
ShopLentor <= 3.2.5 - Unauthenticated Local PHP File Inclusion via 'load_template'
Critical
CVE-2025-8489
King Addons for Elementor – Free Elements, Widgets, Templates, and Features for Elementor 24.12.92 - 51.1.14 - Unauthenticated Privilege Escalation
High
CVE-2025-64360
Consulting Elementor Widgets <= 1.4.2 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2025-64361
Consulting Elementor Widgets <= 1.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-8666
Testimonial Carousel For Elementor <= 11.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets
Medium
CVE-2025-11823
ShopLentor – WooCommerce Builder for Elementor & Gutenberg +21 Modules – All in One Solution <= 3.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Low
CVE-2025-11888
ShopEngine Elementor WooCommerce Builder Addon – All in One WooCommerce Solution <= 4.8.4 - Incorrect Authorization to Authenticated (Editor+) License Status Update
Critical
CVE-2025-6325
King Addons for Elementor <= 51.1.36 - Unauthenticated Privilege Escalation
Critical
CVE-2025-6327
King Addons for Elementor <= 51.1.36 - Unauthenticated Arbitrary File Upload
Medium
CVE-2025-11536
Element Pack Addons for Elementor <= 8.2.5 - Authenticated (Subscriber+) Blind Server-Side Request Forgery
High
CVE-2025-62065
RTMKit <= 1.6.5 - Authenticated (Contributor+) Arbitrary File Upload
Medium
CVE-2025-62013
UiChemy <= 4.0.0 - Missing Authorization
Medium
CVE-2025-10873
Elementinvader Addons for Elementor <= 1.4.0 - Unauthenticated Arbitrary Email Sending
Medium
CVE-2025-59556
GoStore < 1.6.4 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.