{"items":[{"id":"CVE-2026-112365","published":"2026-10-30T17:15:31.461Z","updated":"2026-10-30T18:08:57.531Z","title":"easy.jobs <= 2.8.4 - Unauthenticated Stored Cross-Site Scripting via 'cover_letter' Parameter","severity":"HIGH","score":7.2,"vendor":"wpdevteam","product":"easy.jobs – AI powered Job Listing, Job Board, Career Page, Recruitment & Hiring Solution","kev":false,"epss":0.00528,"kevAdded":null},{"id":"CVE-2026-118205","published":"2026-10-30T17:15:30.431Z","updated":"2026-10-30T18:08:57.942Z","title":"Essential Addons for Elementor <= 6.8.7 - Unauthenticated Privilege Escalation to 'page_id' Parameter via Elementor Revision","severity":"HIGH","score":7.4,"vendor":"wpdevteam","product":"Essential Addons for Elementor – Popular Elementor Templates & Widgets","kev":false,"epss":0.00469,"kevAdded":null},{"id":"CVE-2026-108366","published":"2026-10-28T06:45:16.742Z","updated":"2026-10-29T01:41:52.136Z","title":"easy.jobs <= 2.8.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'icon' Block Attribute","severity":"MEDIUM","score":6.4,"vendor":"wpdevteam","product":"easy.jobs – AI powered Job Listing, Job Board, Career Page, Recruitment & Hiring Solution","kev":false,"epss":0.00206,"kevAdded":null},{"id":"CVE-2026-109985","published":"2026-10-17T03:43:26.663Z","updated":"2026-10-18T11:12:34.780Z","title":"xSpeed Cache: AI-Powered Performance Hub with MCP, Caching & CDN <= 1.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'post_content' Parameter","severity":"MEDIUM","score":6.4,"vendor":"wpdevteam","product":"xSpeed Cache: AI-Powered Performance Hub with MCP, Caching & CDN","kev":false,"epss":0.00195,"kevAdded":null},{"id":"CVE-2026-109513","published":"2026-10-16T05:30:26.784Z","updated":"2026-10-16T14:29:18.061Z","title":"NotificationX <= 3.3.3 - Unauthenticated Stored Cross-Site Scripting via 'name' Parameter via popup-submit REST Route","severity":"HIGH","score":7.2,"vendor":"wpdevteam","product":"NotificationX – FOMO, Live Sales Notification, WooCommerce Sales Popup, GDPR, Social Proof, Announcement Banner & Floating Notification Bar","kev":false,"epss":0.00241,"kevAdded":null},{"id":"CVE-2026-110721","published":"2026-10-16T04:27:00.768Z","updated":"2026-10-16T15:09:39.990Z","title":"NotificationX <= 3.3.3 - Missing Authorization to Unauthenticated Arbitrary Content Injection via 'nx_id' Parameter on /popup-submit REST Route","severity":"MEDIUM","score":5.3,"vendor":"wpdevteam","product":"NotificationX – FOMO, Live Sales Notification, WooCommerce Sales Popup, GDPR, Social Proof, Announcement Banner & Floating Notification Bar","kev":false,"epss":0.00245,"kevAdded":null},{"id":"CVE-2026-92727","published":"2026-10-03T03:25:45.531Z","updated":"2026-10-03T15:42:45.992Z","title":"EmbedPress <= 4.6.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'slidesShow' Block Attribute","severity":"MEDIUM","score":6.4,"vendor":"wpdevteam","product":"EmbedPress – PDF Embedder, 3D PDF FlipBook, Google Reviews, YouTube Videos, Upload & Embed PDF documents","kev":false,"epss":0.00192,"kevAdded":null},{"id":"CVE-2026-96256","published":"2026-10-01T09:26:57.815Z","updated":"2026-10-03T15:42:51.333Z","title":"Gutenberg Essential Blocks <= 6.4.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'marker' Attribute","severity":"MEDIUM","score":6.4,"vendor":"wpdevteam","product":"Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns","kev":false,"epss":0.00284,"kevAdded":null},{"id":"CVE-2026-89330","published":"2026-09-18T06:38:56.396Z","updated":"2026-09-18T11:35:19.335Z","title":"EmbedPress <= 4.6.5 - Reflected Cross-Site Scripting via 'hash' and 'unique' Parameters","severity":"MEDIUM","score":6.1,"vendor":"wpdevteam","product":"EmbedPress – PDF Embedder, 3D PDF FlipBook, Google Reviews, YouTube Videos, Upload & Embed PDF documents","kev":false,"epss":0.00368,"kevAdded":null},{"id":"CVE-2026-75980","published":"2026-09-01T05:30:41.748Z","updated":"2026-09-01T12:27:14.416Z","title":"BetterDocs <= 4.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Heading 'id' Attribute in Post Content","severity":"MEDIUM","score":6.4,"vendor":"wpdevteam","product":"BetterDocs – AI Documentation, Knowledge Base, MCP Server, Docs, Wikis, FAQ & Chatbot","kev":false,"epss":0.00349,"kevAdded":null},{"id":"CVE-2026-19801","published":"2026-08-25T01:26:44.025Z","updated":"2026-08-25T19:22:38.068Z","title":"BetterLinks <= 3.1.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Short URL Creation via create_fbs_link AJAX Action","severity":"MEDIUM","score":4.3,"vendor":"wpdevteam","product":"BetterLinks – Link Shortener, Link Cloaking, Redirects, Affiliate Link Manager & MCP","kev":false,"epss":0.00403,"kevAdded":null},{"id":"CVE-2026-18438","published":"2026-08-15T09:25:18.170Z","updated":"2026-08-17T19:38:56.823Z","title":"Templately <= 3.7.1 - Authenticated (Contributor+) Arbitrary File Upload to Remote Code Execution via Gutenberg Cloud Import Attachment Filename Mismatch","severity":"HIGH","score":8.8,"vendor":"wpdevteam","product":"Templately – Elementor & Gutenberg Template Library: 6500+ Free & Pro Ready Templates And Cloud!","kev":false,"epss":0.01312,"kevAdded":null},{"id":"CVE-2026-15145","published":"2026-07-21T07:51:21.180Z","updated":"2026-07-23T14:30:37.508Z","title":"Essential Addons for Elementor <= 6.6.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via Fancy Text Widget","severity":"MEDIUM","score":6.4,"vendor":"wpdevteam","product":"Essential Addons for Elementor – Popular Elementor Templates & Widgets","kev":false,"epss":0.00419,"kevAdded":null},{"id":"CVE-2026-15156","published":"2026-07-21T04:33:03.564Z","updated":"2026-07-22T14:19:38.985Z","title":"Essential Addons for Elementor <= 6.6.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via Reading Progress Global Color Settings","severity":"MEDIUM","score":6.4,"vendor":"wpdevteam","product":"Essential Addons for Elementor – Popular Elementor Templates & Widgets","kev":false,"epss":0.00349,"kevAdded":null},{"id":"CVE-2026-15155","published":"2026-07-11T05:35:49.683Z","updated":"2026-07-15T13:46:28.209Z","title":"Essential Addons for Elementor <= 6.6.10 - Authenticated (Contributor+) Account Takeover via Email Header Injection","severity":"HIGH","score":8.8,"vendor":"wpdevteam","product":"Essential Addons for Elementor – Popular Elementor Templates & Widgets","kev":false,"epss":0.00671,"kevAdded":null},{"id":"CVE-2026-15104","published":"2026-07-10T07:48:40.039Z","updated":"2026-07-10T17:59:24.023Z","title":"BetterDocs <= 4.6.0 - Authenticated (Custom+) SQL Injection via 'lang' Parameter","severity":"MEDIUM","score":6.5,"vendor":"wpdevteam","product":"BetterDocs –  AI Documentation, Knowledge Base, Docs, Wikis, FAQ with Chatbot","kev":false,"epss":0.00413,"kevAdded":null},{"id":"CVE-2026-6459","published":"2026-07-08T12:33:16.005Z","updated":"2026-07-08T14:11:23.298Z","title":"Essential Addons for Elementor <= 6.6.2 - Authenticated (Author+) Stored Cross-Site Scripting via Event Calendar Widget Popup","severity":"MEDIUM","score":6.4,"vendor":"wpdevteam","product":"Essential Addons for Elementor – Popular Elementor Templates & Widgets","kev":false,"epss":0.00321,"kevAdded":null},{"id":"CVE-2026-10833","published":"2026-06-25T03:42:20.497Z","updated":"2026-06-25T12:27:38.276Z","title":"Gutenberg Essential Blocks - Page Builder for Gutenberg Blocks & Patterns <= 6.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'configurablePrefix' Block Attribute","severity":"MEDIUM","score":6.4,"vendor":"wpdevteam","product":"Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns","kev":false,"epss":0.00331,"kevAdded":null},{"id":"CVE-2026-12157","published":"2026-06-19T04:31:32.712Z","updated":"2026-06-22T12:52:02.336Z","title":"BetterDocs <= 4.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'blockId' Block Attribute","severity":"MEDIUM","score":6.4,"vendor":"wpdevteam","product":"BetterDocs –  AI Documentation, Knowledge Base, Docs, Wikis, FAQ with Chatbot","kev":false,"epss":0.00349,"kevAdded":null},{"id":"CVE-2026-7796","published":"2026-06-06T02:28:36.449Z","updated":"2026-06-06T11:47:40.895Z","title":"EmbedPress <= 4.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Block 'url' Attribute","severity":"MEDIUM","score":6.4,"vendor":"wpdevteam","product":"EmbedPress – PDF Embedder, Embed PDF viewer, YouTube Videos, 3D FlipBook, Social feeds & more","kev":false,"epss":0.00331,"kevAdded":null},{"id":"CVE-2026-7665","published":"2026-06-06T02:28:36.091Z","updated":"2026-06-06T11:47:54.832Z","title":"Essential Addons for Elementor <= 6.6.4 - Missing Authorization to Unauthenticated Information Exposure via 'load_more' AJAX Handler","severity":"MEDIUM","score":5.3,"vendor":"wpdevteam","product":"Essential Addons for Elementor – Popular Elementor Templates & Widgets","kev":false,"epss":0.06837,"kevAdded":null},{"id":"CVE-2026-10586","published":"2026-06-04T23:28:52.002Z","updated":"2026-06-12T16:08:43.717Z","title":"Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns <= 6.1.3 - Authenticated (Author+) Server-Side Request Forgery","severity":"HIGH","score":7.2,"vendor":"wpdevteam","product":"Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns","kev":false,"epss":0.00264,"kevAdded":null},{"id":"CVE-2026-5193","published":"2026-05-14T06:44:10.076Z","updated":"2026-05-14T10:45:23.691Z","title":"Essential Addons for Elementor – Popular Elementor Templates & Widgets <= 6.5.13 - Authenticated (Author+) Limited Privilege Escalation via register_user","severity":"MEDIUM","score":6.5,"vendor":"wpdevteam","product":"Essential Addons for Elementor – Popular Elementor Templates & Widgets","kev":false,"epss":0.00238,"kevAdded":null},{"id":"CVE-2026-4658","published":"2026-05-02T04:27:44.707Z","updated":"2026-05-04T16:03:39.376Z","title":"Gutenberg Essential Blocks <= 6.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Block Attributes","severity":"MEDIUM","score":6.4,"vendor":"wpdevteam","product":"Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns","kev":false,"epss":0.00419,"kevAdded":null},{"id":"CVE-2026-6393","published":"2026-04-24T03:27:05.541Z","updated":"2026-04-24T10:46:24.083Z","title":"BetterDocs <= 4.3.11 - Missing Authorization to Authenticated (Subscriber+) Unauthorized AI API Usage","severity":"MEDIUM","score":4.3,"vendor":"wpdevteam","product":"BetterDocs –  Knowledge Base Docs & FAQ Solution for Elementor & Block Editor","kev":false,"epss":0.0027,"kevAdded":null},{"id":"CVE-2026-3875","published":"2026-04-16T06:44:51.744Z","updated":"2026-04-16T13:41:59.186Z","title":"BetterDocs <= 4.3.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes","severity":"MEDIUM","score":6.4,"vendor":"wpdevteam","product":"BetterDocs –  Knowledge Base Docs & FAQ Solution for Elementor & Block Editor","kev":false,"epss":0.00218,"kevAdded":null},{"id":"CVE-2026-1512","published":"2026-02-14T09:49:39.256Z","updated":"2026-04-08T17:26:18.987Z","title":"Essential Addons for Elementor <= 6.5.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Info Box Widget","severity":"MEDIUM","score":6.4,"vendor":"wpdevteam","product":"Essential Addons for Elementor – Popular Elementor Templates & Widgets","kev":false,"epss":0.00267,"kevAdded":null},{"id":"CVE-2026-0554","published":"2026-01-20T14:26:34.215Z","updated":"2026-04-08T17:29:28.505Z","title":"NotificationX <= 3.1.11 - Missing Authorization to Authenticated (Contributor+) Analytics Reset","severity":"MEDIUM","score":4.3,"vendor":"wpdevteam","product":"NotificationX – FOMO, Live Sales Notification, WooCommerce Sales Popup, GDPR, Social Proof, Announcement Banner & Floating Notification Bar","kev":false,"epss":0.0032,"kevAdded":null},{"id":"CVE-2025-15380","published":"2026-01-20T14:26:33.859Z","updated":"2026-04-08T17:11:27.627Z","title":"NotificationX <= 3.2.0 - Unauthenticated DOM-Based Cross-Site Scripting via 'nx-preview'","severity":"HIGH","score":7.2,"vendor":"wpdevteam","product":"NotificationX – FOMO, Live Sales Notification, WooCommerce Sales Popup, GDPR, Social Proof, Announcement Banner & Floating Notification Bar","kev":false,"epss":0.00282,"kevAdded":null},{"id":"CVE-2026-1004","published":"2026-01-16T08:23:37.542Z","updated":"2026-04-08T16:33:51.372Z","title":"Essential Addons for Elementor <= 6.5.5 - Missing Authorization to Unauthenticated Sensitive Information Exposure","severity":"MEDIUM","score":5.3,"vendor":"wpdevteam","product":"Essential Addons for Elementor – Popular Elementor Templates & Widgets","kev":false,"epss":0.00374,"kevAdded":null},{"id":"CVE-2026-0831","published":"2026-01-10T09:22:18.126Z","updated":"2026-04-08T17:01:43.379Z","title":"Templately <= 3.4.8 - Unauthenticated Limited Arbitrary JSON File Write","severity":"MEDIUM","score":5.3,"vendor":"wpdevteam","product":"Templately – Elementor & Gutenberg Template Library: 6500+ Free & Pro Ready Templates And Cloud!","kev":false,"epss":0.00271,"kevAdded":null},{"id":"CVE-2025-14980","published":"2026-01-09T06:34:52.906Z","updated":"2026-04-08T16:36:59.020Z","title":"BetterDocs <= 4.3.3 - Authenticated (Contributor+) Sensitive Information Exposure","severity":"MEDIUM","score":6.5,"vendor":"wpdevteam","product":"BetterDocs –  Knowledge Base Docs & FAQ Solution for Elementor & Block Editor","kev":false,"epss":0.00356,"kevAdded":null},{"id":"CVE-2025-13977","published":"2025-12-17T03:20:19.569Z","updated":"2026-04-08T17:12:17.779Z","title":"Essential Addons for Elementor – Popular Elementor Templates & Widgets <= 6.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting","severity":"MEDIUM","score":6.4,"vendor":"wpdevteam","product":"Essential Addons for Elementor – Popular Elementor Templates & Widgets","kev":false,"epss":0.00299,"kevAdded":null},{"id":"CVE-2025-11369","published":"2025-12-17T01:48:52.052Z","updated":"2026-04-08T17:03:06.839Z","title":"Essential Blocks <= 5.7.2 - Missing Authorization To Authenticated (Author+) Information Disclosure","severity":"MEDIUM","score":4.3,"vendor":"wpdevteam","product":"Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns","kev":false,"epss":0.00318,"kevAdded":null},{"id":"CVE-2025-11270","published":"2025-10-18T06:42:47.961Z","updated":"2026-04-08T17:14:28.369Z","title":"Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns <= 5.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting","severity":"MEDIUM","score":6.4,"vendor":"wpdevteam","product":"Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns","kev":false,"epss":0.00254,"kevAdded":null},{"id":"CVE-2025-11361","published":"2025-10-18T04:25:56.613Z","updated":"2026-04-08T17:25:51.712Z","title":"Essential Blocks <= 5.7.1 - Authenticated (Author+) Server-Side Request Forgery","severity":"MEDIUM","score":6.4,"vendor":"wpdevteam","product":"Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns","kev":false,"epss":0.00301,"kevAdded":null},{"id":"CVE-2025-7499","published":"2025-08-16T07:25:29.205Z","updated":"2026-04-08T16:52:45.681Z","title":"BetterDocs  <= 4.1.1 - Missing Authorization to Private And Password-Protected Posts Information Disclosure","severity":"MEDIUM","score":5.3,"vendor":"wpdevteam","product":"BetterDocs –  Knowledge Base Docs & FAQ Solution for Elementor & Block Editor","kev":false,"epss":0.00306,"kevAdded":null},{"id":"CVE-2025-8451","published":"2025-08-15T06:40:41.711Z","updated":"2026-04-08T16:50:23.826Z","title":"Essential Addons for Elementor – Popular Elementor Templates and Widgets <= 6.2.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via 'data-gallery-items'","severity":"MEDIUM","score":6.4,"vendor":"wpdevteam","product":"Essential Addons for Elementor – Popular Elementor Templates & Widgets","kev":false,"epss":0.00269,"kevAdded":null},{"id":"CVE-2025-6244","published":"2025-07-08T01:43:46.743Z","updated":"2026-04-08T17:04:24.577Z","title":"Essential Addons for Elementor – Popular Elementor Templates and Widgets <= 6.1.19 - Authenticated (Contributor+) Stored Cross-Site Scripting via `Calendar` And `Business Reviews` Widgets","severity":"MEDIUM","score":6.4,"vendor":"wpdevteam","product":"Essential Addons for Elementor – Popular Elementor Templates & Widgets","kev":false,"epss":0.00198,"kevAdded":null},{"id":"CVE-2024-5647","published":"2025-07-03T09:22:19.308Z","updated":"2026-08-25T19:06:26.772Z","title":"Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Magnific Popups JavaScript Library","severity":"MEDIUM","score":6.4,"vendor":"blossomthemes","product":"BlossomThemes Social Feed","kev":false,"epss":0.00357,"kevAdded":null},{"id":"CVE-2024-9993","published":"2025-06-07T11:17:51.323Z","updated":"2026-04-08T17:13:59.354Z","title":"Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 6.1.12 - Authenticated(Contributor+) Stored Cross-Site Scripting via Event Calendar Widget","severity":"MEDIUM","score":6.4,"vendor":"wpdevteam","product":"Essential Addons for Elementor – Popular Elementor Templates & Widgets","kev":false,"epss":0.00212,"kevAdded":null},{"id":"CVE-2024-9994","published":"2025-06-07T11:17:49.971Z","updated":"2026-04-08T17:04:36.126Z","title":"Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 6.1.12 - Authenticated(Contributor+) Stored Cross-Site Scripting via Pricing Table Widget","severity":"MEDIUM","score":6.4,"vendor":"wpdevteam","product":"Essential Addons for Elementor – Popular Elementor Templates & Widgets","kev":false,"epss":0.00212,"kevAdded":null},{"id":"CVE-2025-4682","published":"2025-05-27T01:48:48.934Z","updated":"2026-04-08T17:33:58.758Z","title":"Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 5.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Slider and Post Carousel Widgets","severity":"MEDIUM","score":6.4,"vendor":"wpdevteam","product":"Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns","kev":false,"epss":0.00368,"kevAdded":null},{"id":"CVE-2025-1664","published":"2025-03-08T11:16:40.491Z","updated":"2026-04-08T16:58:54.107Z","title":"Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 5.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting","severity":"MEDIUM","score":6.4,"vendor":"wpdevteam","product":"Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns","kev":false,"epss":0.0022,"kevAdded":null},{"id":"CVE-2024-13803","published":"2025-02-26T07:01:18.758Z","updated":"2026-04-08T17:32:07.075Z","title":"Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 5.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting","severity":"MEDIUM","score":6.4,"vendor":"wpdevteam","product":"Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns","kev":false,"epss":0.00482,"kevAdded":null},{"id":"CVE-2024-12045","published":"2025-01-08T07:18:38.149Z","updated":"2026-05-20T14:27:23.263Z","title":"Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 5.0.9 - Authenticated (Admin+) Stored Cross-Site Scripting","severity":"MEDIUM","score":4.4,"vendor":"wpdevteam","product":"Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns","kev":false,"epss":0.00247,"kevAdded":null},{"id":"CVE-2024-11727","published":"2024-12-12T06:46:32.990Z","updated":"2026-04-08T16:45:30.721Z","title":"NotificationX – Live Sales Notification, WooCommerce Sales Popup, FOMO, Social Proof, Announcement Banner & Floating Notification Top Bar <= 2.9.3 - Authenticated (Admin+) Stored Cross-Site Scripting","severity":"MEDIUM","score":4.4,"vendor":"wpdevteam","product":"NotificationX – FOMO, Live Sales Notification, WooCommerce Sales Popup, GDPR, Social Proof, Announcement Banner & Floating Notification Bar","kev":false,"epss":0.00317,"kevAdded":null},{"id":"CVE-2024-11203","published":"2024-11-28T08:47:30.755Z","updated":"2026-04-08T16:37:11.784Z","title":"EmbedPress – Embed PDF, 3D Flipbook, Social Feeds, Google Docs, Vimeo, Wistia, YouTube Videos, Audios, Google Maps in Gutenberg Block & Elementor <= 4.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'provider_name'","severity":"MEDIUM","score":6.4,"vendor":"wpdevteam","product":"EmbedPress – PDF Embedder, Embed YouTube Videos, 3D FlipBook, Social feeds, Docs & more","kev":false,"epss":0.00373,"kevAdded":null},{"id":"CVE-2024-8978","published":"2024-11-15T09:29:39.946Z","updated":"2026-04-08T17:18:18.411Z","title":"Essential Addons for Elementor – Best Elementor Addon, Templates, Widgets, Kits & WooCommerce Builders <= 6.0.9 - Authenticated (Contributor+) Sensitive Information Exposure","severity":"MEDIUM","score":5.7,"vendor":"wpdevteam","product":"Essential Addons for Elementor – Popular Elementor Templates & Widgets","kev":false,"epss":0.00491,"kevAdded":null},{"id":"CVE-2024-8979","published":"2024-11-15T09:29:39.230Z","updated":"2026-04-08T16:45:50.471Z","title":"Essential Addons for Elementor – Best Elementor Addon, Templates, Widgets, Kits & WooCommerce Builders <= 6.0.9 - Authenticated (Author+) Sensitive Information Exposure to Privilege Escalation","severity":"HIGH","score":8,"vendor":"wpdevteam","product":"Essential Addons for Elementor – Popular Elementor Templates & Widgets","kev":false,"epss":0.00525,"kevAdded":null},{"id":"CVE-2024-8961","published":"2024-11-15T06:48:03.358Z","updated":"2026-04-08T16:49:42.760Z","title":"Essential Addons for Elementor – Best Elementor Addon, Templates, Widgets, Kits & WooCommerce Builders <= 6.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting","severity":"MEDIUM","score":6.4,"vendor":"wpdevteam","product":"Essential Addons for Elementor – Popular Elementor Templates & Widgets","kev":false,"epss":0.00322,"kevAdded":null},{"id":"CVE-2021-4447","published":"2024-10-16T06:43:42.210Z","updated":"2026-04-08T17:19:05.873Z","title":"Essential Addons for Elementor <= 4.6.4 - Authenticated (Contributor+) Privilege Escalation","severity":"HIGH","score":8.8,"vendor":"wpdevteam","product":"Essential Addons for Elementor – Popular Elementor Templates & Widgets","kev":false,"epss":0.00461,"kevAdded":null},{"id":"CVE-2021-4446","published":"2024-10-16T06:43:25.787Z","updated":"2026-04-08T16:43:05.419Z","title":"Essential Addons for Elementor <= 4.6.4 - Missing Authorization","severity":"MEDIUM","score":6.3,"vendor":"wpdevteam","product":"Essential Addons for Elementor – Popular Elementor Templates & Widgets","kev":false,"epss":0.00259,"kevAdded":null},{"id":"CVE-2024-8742","published":"2024-09-13T06:47:28.798Z","updated":"2026-04-08T17:01:34.809Z","title":"Essential Addons for Elementor <= 6.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Filterable Gallery Widget","severity":"MEDIUM","score":6.4,"vendor":"wpdevteam","product":"Essential Addons for Elementor – Popular Elementor Templates & Widgets","kev":false,"epss":0.00373,"kevAdded":null},{"id":"CVE-2024-8440","published":"2024-09-11T06:42:25.138Z","updated":"2026-04-08T17:20:55.312Z","title":"Essential Addons for Elementor -- Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 6.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Fancy Text Widget","severity":"MEDIUM","score":6.4,"vendor":"wpdevteam","product":"Essential Addons for Elementor – Popular Elementor Templates & Widgets","kev":false,"epss":0.00385,"kevAdded":null},{"id":"CVE-2024-7092","published":"2024-08-13T04:29:10.738Z","updated":"2026-04-08T17:00:35.503Z","title":"Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.27 - Authenticated (Contributor+) Stored Cross-Site Scripting via no_more_items_text Parameter","severity":"MEDIUM","score":6.4,"vendor":"wpdevteam","product":"Essential Addons for Elementor – Popular Elementor Templates & Widgets","kev":false,"epss":0.00438,"kevAdded":null},{"id":"CVE-2024-6557","published":"2024-07-16T04:31:29.223Z","updated":"2026-04-08T17:33:52.297Z","title":"SchedulePress <= 5.1.3 - Unauthenticated Full Path Disclosure","severity":"MEDIUM","score":5.3,"vendor":"wpdevteam","product":"SchedulePress – Auto Post & Publish, Auto Social Share, Schedule Posts with Editorial Calendar & Missed Schedule Post Publisher","kev":false,"epss":0.00439,"kevAdded":null},{"id":"CVE-2024-1565","published":"2024-06-13T08:31:31.631Z","updated":"2026-04-08T17:23:20.016Z","title":"EmbedPress <= 3.9.10 - Authenticated(Contributor+) Stored Cross-Site Scripting via PDF Widget URL","severity":"MEDIUM","score":6.4,"vendor":"wpdevteam","product":"EmbedPress – PDF Embedder, Embed YouTube Videos, 3D FlipBook, Social feeds, Docs & more","kev":false,"epss":0.00341,"kevAdded":null},{"id":"CVE-2024-5189","published":"2024-06-11T13:54:00.315Z","updated":"2026-04-08T17:14:24.490Z","title":"Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.23 - Authenticated (Contributor+) Stored Cross-Site Scripting","severity":"MEDIUM","score":6.4,"vendor":"wpdevteam","product":"Essential Addons for Elementor – Popular Elementor Templates & Widgets","kev":false,"epss":0.00434,"kevAdded":null},{"id":"CVE-2024-5188","published":"2024-06-06T11:03:03.438Z","updated":"2026-04-08T16:54:58.484Z","title":"Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.22 - Authenticated (Contributor+) Stored Cross-Site Scripting","severity":"MEDIUM","score":6.4,"vendor":"wpdevteam","product":"Essential Addons for Elementor – Popular Elementor Templates & Widgets","kev":false,"epss":0.00322,"kevAdded":null},{"id":"CVE-2024-5571","published":"2024-06-05T08:33:15.749Z","updated":"2026-04-08T17:02:35.104Z","title":"EmbedPress – Embed PDF, Google Docs, Vimeo, Wistia, Embed YouTube Videos, Audios, Maps & Embed Any Documents in Gutenberg & Elementor <= 4.0.1 -  Authenticated (Contributor+) Stored Cross-Site Scripting via EmbedPress PDF Widget","severity":"MEDIUM","score":6.4,"vendor":"wpdevteam","product":"EmbedPress – PDF Embedder, Embed YouTube Videos, 3D FlipBook, Social feeds, Docs & more","kev":false,"epss":0.00314,"kevAdded":null},{"id":"CVE-2024-5073","published":"2024-05-30T06:48:08.882Z","updated":"2026-04-08T17:21:41.387Z","title":"Essential Addons for Elementor <= 5.9.21 - Authenticated (Contributor+) Stored Cross-Site Scripting via Twitter Feed","severity":"MEDIUM","score":6.4,"vendor":"wpdevteam","product":"Essential Addons for Elementor – Popular Elementor Templates & Widgets","kev":false,"epss":0.00329,"kevAdded":null},{"id":"CVE-2024-1803","published":"2024-05-23T12:43:28.622Z","updated":"2026-04-08T16:37:23.405Z","title":"EmbedPress – Embed PDF, Google Docs, Vimeo, Wistia, Embed YouTube Videos, Audios, Maps & Embed Any Documents in Gutenberg & Elementor <= 3.9.12 - Insufficient Authorization Checks to Block Usual","severity":"MEDIUM","score":4.3,"vendor":"wpdevteam","product":"EmbedPress – PDF Embedder, Embed YouTube Videos, 3D FlipBook, Social feeds, Docs & more","kev":false,"epss":0.0028,"kevAdded":null},{"id":"CVE-2024-4891","published":"2024-05-18T04:30:53.061Z","updated":"2026-04-08T17:29:02.467Z","title":"Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 4.5.12 - Authenticated (Contributor+) Stored Cross-Site Scripting","severity":"MEDIUM","score":6.4,"vendor":"wpdevteam","product":"Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns","kev":false,"epss":0.00468,"kevAdded":null},{"id":"CVE-2024-4624","published":"2024-05-14T11:33:10.571Z","updated":"2026-04-08T17:19:18.718Z","title":"Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.20 - Authenticated (Contributor+) Stored Cross-Site Scripting","severity":"MEDIUM","score":6.4,"vendor":"wpdevteam","product":"Essential Addons for Elementor – Popular Elementor Templates & Widgets","kev":false,"epss":0.00441,"kevAdded":null},{"id":"CVE-2024-4275","published":"2024-05-10T07:33:38.841Z","updated":"2026-04-08T17:09:19.898Z","title":"Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.19 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'Interactive Circles'","severity":"MEDIUM","score":6.4,"vendor":"wpdevteam","product":"Essential Addons for Elementor – Popular Elementor Templates & Widgets","kev":false,"epss":0.0034,"kevAdded":null},{"id":"CVE-2024-4449","published":"2024-05-10T07:33:37.890Z","updated":"2026-04-08T16:54:30.495Z","title":"Essential Addons for Elementor  <= 5.9.19 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Several Widgets","severity":"MEDIUM","score":6.4,"vendor":"wpdevteam","product":"Essential Addons for Elementor – Popular Elementor Templates & Widgets","kev":false,"epss":0.0034,"kevAdded":null},{"id":"CVE-2024-4448","published":"2024-05-10T07:33:37.184Z","updated":"2026-04-08T16:41:32.171Z","title":"Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.19 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'Dual Color Header', 'Event Calendar', & 'Advanced Data Table'","severity":"MEDIUM","score":6.4,"vendor":"wpdevteam","product":"Essential Addons for Elementor – Popular Elementor Templates & Widgets","kev":false,"epss":0.00504,"kevAdded":null},{"id":"CVE-2024-4316","published":"2024-05-09T20:03:22.848Z","updated":"2026-04-08T16:43:36.184Z","title":"EmbedPress Embed PDF, Google Docs, Vimeo, Wistia, Embed YouTube Videos, Audios, Maps & Embed Any Documents in Gutenberg & Elementor <= 3.9.16 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter","severity":"MEDIUM","score":6.4,"vendor":"wpdevteam","product":"EmbedPress – PDF Embedder, Embed YouTube Videos, 3D FlipBook, Social feeds, Docs & more","kev":false,"epss":0.0034,"kevAdded":null},{"id":"CVE-2024-3728","published":"2024-05-02T16:51:53.633Z","updated":"2026-04-08T16:43:06.446Z","title":"Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via Filterable Gallery & Interactive Circle","severity":"MEDIUM","score":6.4,"vendor":"wpdevteam","product":"Essential Addons for Elementor – Popular Elementor Templates & Widgets","kev":false,"epss":0.00552,"kevAdded":null},{"id":"CVE-2024-4156","published":"2024-05-02T16:51:52.490Z","updated":"2026-04-08T16:41:57.829Z","title":"Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.17 - Authenticated (Contributor+) Stored Cross-Site Scripting","severity":"MEDIUM","score":6.4,"vendor":"wpdevteam","product":"Essential Addons for Elementor – Popular Elementor Templates & Widgets","kev":false,"epss":0.00602,"kevAdded":null},{"id":"CVE-2024-4003","published":"2024-05-02T16:51:51.058Z","updated":"2026-04-08T16:40:31.697Z","title":"Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.15 - Authenticated (Contributor+) Stored Cross-Site Scripting","severity":"MEDIUM","score":6.4,"vendor":"wpdevteam","product":"Essential Addons for Elementor – Popular Elementor Templates & Widgets","kev":false,"epss":0.0048,"kevAdded":null},{"id":"CVE-2024-3733","published":"2024-04-25T08:29:00.282Z","updated":"2026-04-08T16:47:40.391Z","title":"Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.15 - Information Exposure","severity":"MEDIUM","score":5.3,"vendor":"wpdevteam","product":"Essential Addons for Elementor – Popular Elementor Templates & Widgets","kev":false,"epss":0.00496,"kevAdded":null},{"id":"CVE-2024-3818","published":"2024-04-19T02:34:43.283Z","updated":"2026-04-08T16:58:58.200Z","title":"Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 4.5.9 - Authenticated (Contributor+) DOM-Based Cross-Site Scripting via \"Social Icons\" Block","severity":"MEDIUM","score":5.4,"vendor":"wpdevteam","product":"Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns","kev":false,"epss":0.0034,"kevAdded":null},{"id":"CVE-2024-3333","published":"2024-04-17T11:34:23.338Z","updated":"2026-04-08T17:14:23.161Z","title":"Essential Addons for Elementor <= 5.9.14 - Authenticated (Contributor+) Store Cross-Site Scripting via Widget URL Attribute","severity":"MEDIUM","score":6.4,"vendor":"wpdevteam","product":"Essential Addons for Elementor – Popular Elementor Templates & Widgets","kev":false,"epss":0.00402,"kevAdded":null},{"id":"CVE-2024-2623","published":"2024-04-09T18:59:17.215Z","updated":"2026-04-08T17:18:17.643Z","title":"Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.11 - Authenticated (Contributor+) Stored Cross-Site Scripting","severity":"MEDIUM","score":6.4,"vendor":"wpdevteam","product":"Essential Addons for Elementor – Popular Elementor Templates & Widgets","kev":false,"epss":0.00446,"kevAdded":null},{"id":"CVE-2024-2974","published":"2024-04-09T18:59:00.562Z","updated":"2026-04-08T17:02:02.905Z","title":"Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.13 - Unauthenticated Sensitive Information Exposure","severity":"MEDIUM","score":5.3,"vendor":"wpdevteam","product":"Essential Addons for Elementor – Popular Elementor Templates & Widgets","kev":false,"epss":0.00496,"kevAdded":null},{"id":"CVE-2024-3244","published":"2024-04-09T18:58:59.605Z","updated":"2026-04-08T17:01:44.378Z","title":"EmbedPress – Embed PDF, Google Docs, Vimeo, Wistia, Embed YouTube Videos, Audios, Maps & Embed Any Documents in Gutenberg & Elementor <= 3.9.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode","severity":"MEDIUM","score":6.4,"vendor":"wpdevteam","product":"EmbedPress – PDF Embedder, Embed YouTube Videos, 3D FlipBook, Social feeds, Docs & more","kev":false,"epss":0.00509,"kevAdded":null},{"id":"CVE-2024-2650","published":"2024-04-09T18:58:56.390Z","updated":"2026-04-08T17:00:43.207Z","title":"Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.11 - Authenticated (Contributor+) Stored Cross-Site Scripting","severity":"MEDIUM","score":6.4,"vendor":"wpdevteam","product":"Essential Addons for Elementor – Popular Elementor Templates & Widgets","kev":false,"epss":0.00353,"kevAdded":null},{"id":"CVE-2024-2845","published":"2024-04-09T18:58:40.543Z","updated":"2026-04-08T16:44:04.109Z","title":"BetterDocs – Best Documentation, FAQ & Knowledge Base Plugin with AI Support & Instant Answer For Elementor & Gutenberg <= 3.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode","severity":"MEDIUM","score":6.4,"vendor":"wpdevteam","product":"BetterDocs –  Knowledge Base Docs & FAQ Solution for Elementor & Block Editor","kev":false,"epss":0.00353,"kevAdded":null},{"id":"CVE-2024-3245","published":"2024-04-06T02:32:04.151Z","updated":"2026-04-08T17:12:58.886Z","title":"EmbedPress – Embed PDF, Google Docs, Vimeo, Wistia, Embed YouTube Videos, Audios, Maps & Embed Any Documents in Gutenberg & Elementor <= 3.9.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via Youtube Block","severity":"MEDIUM","score":6.4,"vendor":"wpdevteam","product":"EmbedPress – PDF Embedder, Embed YouTube Videos, 3D FlipBook, Social feeds, Docs & more","kev":false,"epss":0.0032,"kevAdded":null},{"id":"CVE-2024-3018","published":"2024-03-30T11:17:25.675Z","updated":"2026-04-08T16:45:39.974Z","title":"Essential Addons for Elementor <= 5.9.13 - Authenticated (Author+) PHP Object Injection via error_resetpassword","severity":"HIGH","score":8.8,"vendor":"wpdevteam","product":"Essential Addons for Elementor – Popular Elementor Templates & Widgets","kev":false,"epss":0.00769,"kevAdded":null},{"id":"CVE-2024-2468","published":"2024-03-23T02:32:56.446Z","updated":"2026-04-08T17:24:23.000Z","title":"EmbedPress <= 3.9.12 - Authenticated(Contributor+) Stored Cross-Site Scripting via Widget Attribute","severity":"MEDIUM","score":6.4,"vendor":"wpdevteam","product":"EmbedPress – PDF Embedder, Embed YouTube Videos, 3D FlipBook, Social feeds, Docs & more","kev":false,"epss":0.0034,"kevAdded":null},{"id":"CVE-2024-2688","published":"2024-03-23T02:32:55.950Z","updated":"2026-04-08T17:20:57.736Z","title":"EmbedPress – Embed PDF, Google Docs, Vimeo, Wistia, Embed YouTube Videos, Audios, Maps & Embed Any Documents in Gutenberg & Elementor <= 3.9.12 - Authenticated (Contributor+) Stored Cross-site Scripting via 'embedpress_doc_custom_color'","severity":"MEDIUM","score":5.4,"vendor":"wpdevteam","product":"EmbedPress – PDF Embedder, Embed YouTube Videos, 3D FlipBook, Social feeds, Docs & more","kev":false,"epss":0.0034,"kevAdded":null},{"id":"CVE-2024-2255","published":"2024-03-20T03:20:32.539Z","updated":"2026-04-08T17:24:43.511Z","title":"Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 4.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting","severity":"MEDIUM","score":6.4,"vendor":"wpdevteam","product":"Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns","kev":false,"epss":0.00555,"kevAdded":null},{"id":"CVE-2024-1854","published":"2024-03-13T15:27:02.758Z","updated":"2026-04-08T17:04:44.973Z","title":"Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 4.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting","severity":"MEDIUM","score":6.4,"vendor":"wpdevteam","product":"Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns","kev":false,"epss":0.00423,"kevAdded":null},{"id":"CVE-2024-1537","published":"2024-03-13T15:26:59.753Z","updated":"2026-04-08T17:03:48.151Z","title":"Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Data Table","severity":"MEDIUM","score":6.4,"vendor":"wpdevteam","product":"Essential Addons for Elementor – Popular Elementor Templates & Widgets","kev":false,"epss":0.00421,"kevAdded":null},{"id":"CVE-2024-1536","published":"2024-03-13T15:26:34.059Z","updated":"2026-04-08T16:36:31.899Z","title":"Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Event Calendar","severity":"HIGH","score":7.4,"vendor":"wpdevteam","product":"Essential Addons for Elementor – Popular Elementor Templates & Widgets","kev":false,"epss":0.00549,"kevAdded":null},{"id":"CVE-2024-1802","published":"2024-03-07T20:33:25.984Z","updated":"2026-04-08T16:50:10.868Z","title":"EmbedPress – Embed PDF, Google Docs, Vimeo, Wistia, Embed YouTube Videos, Audios, Maps & Embed Any Documents in Gutenberg & Elementor <= 3.9.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via Wistia Block","severity":"MEDIUM","score":6.4,"vendor":"wpdevteam","product":"EmbedPress – PDF Embedder, Embed YouTube Videos, 3D FlipBook, Social feeds, Docs & more","kev":false,"epss":0.0032,"kevAdded":null},{"id":"CVE-2024-2128","published":"2024-03-07T19:32:59.348Z","updated":"2026-04-08T16:56:50.405Z","title":"EmbedPress – Embed PDF, Google Docs, Vimeo, Wistia, Embed YouTube Videos, Audios, Maps & Embed Any Documents in Gutenberg & Elementor <= 3.9.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via EmbedPress PDF Widget","severity":"MEDIUM","score":6.4,"vendor":"wpdevteam","product":"EmbedPress – PDF Embedder, Embed YouTube Videos, 3D FlipBook, Social feeds, Docs & more","kev":false,"epss":0.00405,"kevAdded":null},{"id":"CVE-2024-1698","published":"2024-02-27T05:33:12.316Z","updated":"2026-04-08T17:28:52.669Z","title":"NotificationX – Best FOMO, Social Proof, WooCommerce Sales Popup & Notification Bar Plugin With Elementor <= 2.8.2 - Unauthenticated SQL Injection","severity":"CRITICAL","score":9.8,"vendor":"wpdevteam","product":"NotificationX – FOMO, Live Sales Notification, WooCommerce Sales Popup, GDPR, Social Proof, Announcement Banner & Floating Notification Bar","kev":false,"epss":0.77434,"kevAdded":null},{"id":"CVE-2024-1171","published":"2024-02-20T18:56:51.143Z","updated":"2026-04-08T17:34:28.524Z","title":"Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Filterable Gallery","severity":"MEDIUM","score":5.4,"vendor":"wpdevteam","product":"Essential Addons for Elementor – Popular Elementor Templates & Widgets","kev":false,"epss":0.00423,"kevAdded":null},{"id":"CVE-2024-1172","published":"2024-02-20T18:56:50.201Z","updated":"2026-04-08T17:32:43.528Z","title":"Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Accordion","severity":"MEDIUM","score":5.4,"vendor":"wpdevteam","product":"Essential Addons for Elementor – Popular Elementor Templates & Widgets","kev":false,"epss":0.00456,"kevAdded":null},{"id":"CVE-2024-1276","published":"2024-02-20T18:56:40.459Z","updated":"2026-04-08T17:15:37.414Z","title":"Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting","severity":"MEDIUM","score":6.4,"vendor":"wpdevteam","product":"Essential Addons for Elementor – Popular Elementor Templates & Widgets","kev":false,"epss":0.00446,"kevAdded":null},{"id":"CVE-2024-1349","published":"2024-02-20T18:56:32.390Z","updated":"2026-04-08T16:57:14.210Z","title":"EmbedPress <= 3.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode","severity":"MEDIUM","score":6.4,"vendor":"wpdevteam","product":"EmbedPress – PDF Embedder, Embed YouTube Videos, 3D FlipBook, Social feeds, Docs & more","kev":false,"epss":0.00441,"kevAdded":null},{"id":"CVE-2024-1425","published":"2024-02-20T18:56:30.529Z","updated":"2026-04-08T16:51:24.501Z","title":"EmbedPress <= 3.9.8 - Authenticated(Contributor+) Stored Cross-Site Scripting via Google Calendar Widget Link","severity":"MEDIUM","score":6.4,"vendor":"wpdevteam","product":"EmbedPress – PDF Embedder, Embed YouTube Videos, 3D FlipBook, Social feeds, Docs & more","kev":false,"epss":0.0054,"kevAdded":null},{"id":"CVE-2024-1236","published":"2024-02-20T18:56:27.656Z","updated":"2026-04-08T16:49:01.904Z","title":"Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting","severity":"MEDIUM","score":6.4,"vendor":"wpdevteam","product":"Essential Addons for Elementor – Popular Elementor Templates & Widgets","kev":false,"epss":0.00469,"kevAdded":null},{"id":"CVE-2024-0586","published":"2024-02-05T21:22:00.819Z","updated":"2026-04-08T17:19:32.219Z","title":"Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.4 - Authenticated (Contributor+) Stored Cross-Site Scritping","severity":"MEDIUM","score":6.4,"vendor":"wpdevteam","product":"Essential Addons for Elementor – Popular Elementor Templates & Widgets","kev":false,"epss":0.00399,"kevAdded":null},{"id":"CVE-2024-0954","published":"2024-02-05T21:21:52.530Z","updated":"2026-04-08T17:05:07.011Z","title":"Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.7 - Authenticated (Contributor+) Stored Cross-Site Scripting","severity":"MEDIUM","score":6.4,"vendor":"wpdevteam","product":"Essential Addons for Elementor – Popular Elementor Templates & Widgets","kev":false,"epss":0.00423,"kevAdded":null},{"id":"CVE-2024-0585","published":"2024-02-05T21:21:41.130Z","updated":"2026-04-08T16:48:41.808Z","title":"Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image URl","severity":"MEDIUM","score":5.4,"vendor":"wpdevteam","product":"Essential Addons for Elementor – Popular Elementor Templates & Widgets","kev":false,"epss":0.00399,"kevAdded":null},{"id":"CVE-2023-7071","published":"2024-01-11T08:33:09.516Z","updated":"2026-04-08T17:34:10.179Z","title":"Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 4.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting","severity":"MEDIUM","score":6.4,"vendor":"wpdevteam","product":"Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns","kev":false,"epss":0.00405,"kevAdded":null},{"id":"CVE-2023-7044","published":"2024-01-04T09:31:03.919Z","updated":"2026-04-08T16:59:41.364Z","title":"Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting","severity":"MEDIUM","score":6.4,"vendor":"wpdevteam","product":"Essential Addons for Elementor – Popular Elementor Templates & Widgets","kev":false,"epss":0.00423,"kevAdded":null},{"id":"CVE-2023-6986","published":"2024-01-03T06:41:25.300Z","updated":"2026-04-08T17:24:28.459Z","title":"EmbedPress – Embed PDF, YouTube, Google Docs, Vimeo, Wistia Videos, Audios, Maps & Any Documents in Gutenberg & Elementor <= 3.9.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode","severity":"MEDIUM","score":6.4,"vendor":"wpdevteam","product":"EmbedPress – PDF Embedder, Embed YouTube Videos, 3D FlipBook, Social feeds, Docs & more","kev":false,"epss":0.00423,"kevAdded":null},{"id":"CVE-2023-4386","published":"2023-10-20T07:29:27.908Z","updated":"2026-04-08T17:15:32.371Z","title":"Essential Blocks <= 4.2.0 - Unauthenticated PHP Object Injection via queries","severity":"HIGH","score":8.1,"vendor":"wpdevteam","product":"Essential Blocks Pro","kev":false,"epss":0.00879,"kevAdded":null},{"id":"CVE-2023-4402","published":"2023-10-20T06:35:10.640Z","updated":"2026-04-08T16:40:54.661Z","title":"Essential Blocks <= 4.2.0 - Unauthenticated PHP Object Injection via products","severity":"HIGH","score":8.1,"vendor":"wpdevteam","product":"Essential Blocks Pro","kev":false,"epss":0.01462,"kevAdded":null},{"id":"CVE-2023-4283","published":"2023-08-10T11:05:43.454Z","updated":"2026-04-08T17:16:37.823Z","title":"EmbedPress <= 3.8.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode","severity":"MEDIUM","score":6.4,"vendor":"wpdevteam","product":"EmbedPress – PDF Embedder, Embed YouTube Videos, 3D FlipBook, Social feeds, Docs & more","kev":false,"epss":0.0051,"kevAdded":null},{"id":"CVE-2023-4282","published":"2023-08-10T11:05:42.912Z","updated":"2026-04-08T16:56:25.487Z","title":"EmbedPress <= 3.8.2 - Missing Authorization to Authenticated (Subscriber+) Plugin Settings Delete via admin_post_remove and remove_private_data","severity":"MEDIUM","score":5.4,"vendor":"wpdevteam","product":"EmbedPress – PDF Embedder, Embed YouTube Videos, 3D FlipBook, Social feeds, Docs & more","kev":false,"epss":0.00515,"kevAdded":null},{"id":"CVE-2023-3779","published":"2023-07-20T05:38:59.848Z","updated":"2026-04-08T17:28:37.307Z","title":"Essential Addons For Elementor <=5.8.1 - Unauthenticated MailChimp API Key Disclosure","severity":"MEDIUM","score":5.3,"vendor":"wpdevteam","product":"Essential Addons for Elementor – Popular Elementor Templates & Widgets","kev":false,"epss":0.00588,"kevAdded":null},{"id":"CVE-2020-36744","published":"2023-07-01T04:26:51.230Z","updated":"2026-04-08T16:47:59.887Z","title":"NotificationX <= 1.8.2 - Cross-Site Request Forgery Bypass","severity":"MEDIUM","score":4.3,"vendor":"wpdevteam","product":"NotificationX – FOMO, Live Sales Notification, WooCommerce Sales Popup, GDPR, Social Proof, Announcement Banner & Floating Notification Bar","kev":false,"epss":0.00384,"kevAdded":null},{"id":"CVE-2023-3371","published":"2023-06-27T01:55:28.259Z","updated":"2026-04-08T17:19:46.681Z","title":"EmbedPress <= 3.7.3 - Sensitive Information Exposure","severity":"MEDIUM","score":5.3,"vendor":"wpdevteam","product":"EmbedPress – PDF Embedder, Embed YouTube Videos, 3D FlipBook, Social feeds, Docs & more","kev":false,"epss":0.00539,"kevAdded":null},{"id":"CVE-2023-2083","published":"2023-06-09T05:33:39.357Z","updated":"2026-04-08T17:34:03.818Z","title":"Essential Blocks <= 4.0.6 - Missing Authorization via save","severity":"MEDIUM","score":4.3,"vendor":"wpdevteam","product":"Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns","kev":false,"epss":0.00567,"kevAdded":null},{"id":"CVE-2023-2087","published":"2023-06-09T05:33:34.844Z","updated":"2026-04-08T17:25:37.670Z","title":"Essential Blocks <= 4.0.6 - Cross-Site Request Forgery via save","severity":"MEDIUM","score":4.3,"vendor":"wpdevteam","product":"Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns","kev":false,"epss":0.00323,"kevAdded":null},{"id":"CVE-2023-2085","published":"2023-06-09T05:33:26.919Z","updated":"2026-04-08T17:15:07.640Z","title":"Essential Blocks <= 4.0.6 - Missing Authorization via templates","severity":"MEDIUM","score":4.3,"vendor":"wpdevteam","product":"Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns","kev":false,"epss":0.00607,"kevAdded":null},{"id":"CVE-2023-2086","published":"2023-06-09T05:33:25.247Z","updated":"2026-04-08T17:11:52.218Z","title":"Essential Blocks <= 4.0.6 - Missing Authorization via template_count","severity":"MEDIUM","score":4.3,"vendor":"wpdevteam","product":"Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns","kev":false,"epss":0.00572,"kevAdded":null},{"id":"CVE-2023-2084","published":"2023-06-09T05:33:10.327Z","updated":"2026-04-08T16:34:57.411Z","title":"Essential Blocks <= 4.0.6 - Missing Authorization via get","severity":"MEDIUM","score":4.3,"vendor":"wpdevteam","product":"Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns","kev":false,"epss":0.00513,"kevAdded":null}]}