Vulnerability history

Admin+ Remote Code Execution via Widget Builder vulnerability

Authenticated (Contributor+) Server-Side Request Forgery via Form Builder Widget 'webhook_url' Setting vulnerability

Contributor+ Stored XSS via Icon Box Widget vulnerability

Authenticated (Contributor+) Arbitrary File Read vulnerability

Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Broken Access Control vulnerability

Cross Site Scripting (XSS) vulnerability

Unauthenticated Stored Cross-Site Scripting vulnerability

Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Missing Authorization to Unauthenticated Form Action Meta Modification vulnerability

Authenticated (Contributor+) Server-Side Request Forgery vulnerability

Authenticated (Author+) Stored Cross-Site Scripting vulnerability

Authenticated (Contributor+) Stored Cross-Site Scripting via Instagram Feed Widget vulnerability

Authenticated (Contributor+) Stored Cross-Site Scripting via REST API Meta Bypass vulnerability

Broken Access Control vulnerability

WordPress Royal Addons for Elementor - Addons and Templates Kit for Elementor plugin <= 1.7.1049 - Missing Authorization to Unauthenticated Custom Post Type Contents Exposure vulnerability

Authenticated (Author+) Arbitrary File Upload via main.php Upload Bypass vulnerability

Other vulnerability Type vulnerability

Missing Authorization via wpr_update_form_action_meta vulnerability

Cross-Site Request Forgery via add_to_compare vulnerability

Cross-Site Request Forgery via remove_from_compare vulnerability

Cross-Site Request Forgery via remove_from_wishlist vulnerability

Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting vulnerability

Authenticated (Contributor+) Stored Cross-Site Scripting via HTML Tags vulnerability

Authenticated (Contributor+) Stored Cross-Site Scripting via Advanced Accordion Title Tags vulnerability

Authenticated (Contributor+) Stored Cross-Site Scripting via Back to Top Widget vulnerability

Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Google Maps Widget vulnerability

Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget vulnerability

Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Missing Authorization to Unauthenticated Media File Upload vulnerability

Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting

Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Multiple Widgets vulnerability

Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Cross Site Scripting (XSS) vulnerability

Cross Site Scripting (XSS) vulnerability

Authenticated DOM-Based (Contributor+) Stored Cross-Site Scripting vulnerability

Server Side Request Forgery (SSRF) vulnerability

Cross-Site Request Forgery to Reflected Cross-Site Scripting vulnerability

Cross-Site Request Forgery to Stored Cross-Site Scripting vulnerability

Broken Access Control vulnerability

Reflected Cross Site Scripting (XSS) vulnerability

Cross Site Scripting (XSS) vulnerability

Authenticated (Contributor+) Post Disclosure vulnerability

Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Form Builder Widget vulnerability

XML External Entity (XXE) vulnerability

Authenticated (Subscriber+) Private Post Disclosure vulnerability

Authenticated (Contributor+) Stored Cross-Site Scripting via Team Member Widget vulnerability

Cross Site Scripting (XSS) vulnerability

Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Magazine Grid/Slider Widget vulnerability

Authenticated (Author+) Stored Cross-Site Scripting via SVG Uploads vulnerability

Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated (Contributor+) Stored Cross-Site Scripting via Form Builder Widget vulnerability

Authenticated (Contributor+) Stored Cross-Site Scripting via Flip Carousel, Flip Box, Post Grid, and Taxonomy List Widget Attributes vulnerability

IP Bypass vulnerability

Unauthenticated Limited File Upload vulnerability

Cross Site Scripting (XSS) vulnerability

Authenticated (Contributor+) Stored Cross-Site Scripting via Logo Widget vulnerability

Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Multiple Cross-Site Request Forgery vulnerability

Missing Authorization & Cross-Site Request Forgery via wpr_update_form_action_meta vulnerability

Unauthenticated Arbitrary Post Read vulnerability

Unauthenticated Arbitrary File Upload vulnerability

Multiple Cross Site Request Forgery (CSRF)

Reflected Cross Site Scripting (XSS) vulnerability

Unauthenticated MailChimp API Key Disclosure vulnerability

Insufficient Access Control to Template Kit Import Vulnerability

Insufficient Access Control to Theme Activation Vulnerability

Insufficient Access Control to Plugin Deactivation Vulnerability

Insufficient Access Control to Menu Settings Update Vulnerability

Insufficient Access Control to Template Conditions Modification Vulnerability

Reflected Cross-Site Scripting Vulnerability

Insufficient Access Control to Template Import Vulnerability

Insufficient Access Control to Import Deletion Vulnerability

Insufficient Access Control to Plugin Activation Vulnerability

Cross-Site Request Forgery to Menu Template creation Vulnerability

Insufficient Access Control to Template Activation Vulnerability

Subscriber+ Arbitrary Post Deletion vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Sensitive Information Disclosure vulnerability