Threat database

7 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
High	7.1	EPSS 0.2%	CVE-2026-40806Blog, Posts and Category Filter for Elementor · Cross-site Scripting High7.1EPSS 0.2%2026-10-06CVE Database V5CVE-2026-40806 Unauthenticated Cross Site Scripting (XSS) in Blog, Posts and Category Filter for Elementor <= 2.1.0 versions. EPSS 0.2%Vulnerability Plugin Devs #cwe-79	CVE Database V5	2026-10-06
Medium	6.5	EPSS 0.5%	CVE-2025-57955Post Carousel Slider for Elementor · Missing Authorization Medium6.5EPSS 0.5%2025-09-22CVE Database V5CVE-2025-57955 Missing Authorization vulnerability in Plugin Devs Post Carousel Slider for Elementor post-carousel-slider-for-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Post Carousel Slider for Elementor: from n/a through <= 1.7.0. EPSS 0.5%Vulnerability Plugin Devs	CVE Database V5	2025-09-22
Low	3.5	EPSS 0.2%	CVE-2025-58816Product Carousel Slider for Elementor · Missing Authorization Low3.5EPSS 0.2%2025-09-05CVE Database V5CVE-2025-58816 Missing Authorization vulnerability in Plugin Devs Product Carousel Slider for Elementor ecommerce-product-carousel-slider-for-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Product Carousel Slider for Elementor: from n/a through <= 2.1.3. EPSS 0.2%Vulnerability Plugin Devs	CVE Database V5	2025-09-05
Medium	6.5	EPSS 0.4%	CVE-2025-31795Shopify to WooCommerce Migration · Missing Authorization Medium6.5EPSS 0.4%2025-04-03CVE Database V5CVE-2025-31795 Missing Authorization vulnerability in Plugin Devs Shopify to WooCommerce Migration migrate-shopify-to-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Shopify to WooCommerce Migration: from n/a through <= 1.3.0. EPSS 0.4%Vulnerability Plugin Devs	CVE Database V5	2025-04-03
Medium	6.5	EPSS 0.3%	CVE-2025-22648Blog, Posts and Category Filter for Elementor · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Plugin Devs… Medium6.5EPSS 0.3%2025-03-27CVE Database V5CVE-2025-22648 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Plugin Devs Blog, Posts and Category Filter for Elementor blog-posts-and-category-for-elementor allows Stored XSS.This issue affects Blog, Posts and Category Filter for Elementor: from n/a through <= 2.0.1. EPSS 0.3%Vulnerability Plugin Devs	CVE Database V5	2025-03-27
Medium	4.3	EPSS 0.4%	CVE-2024-54278News Ticker for Elementor · Missing Authorization Medium4.3EPSS 0.4%2024-12-13CVE Database V5CVE-2024-54278 Missing Authorization vulnerability in Plugin Devs News Ticker for Elementor news-ticker-for-elementor allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects News Ticker for Elementor: from n/a through <= 2.1.3. EPSS 0.4%Vulnerability Plugin Devs	CVE Database V5	2024-12-13
Medium	6.5	EPSS 0.2%	CVE-2024-53749Post Carousel Slider for Elementor · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Plugin Devs… Medium6.5EPSS 0.2%2024-12-01CVE Database V5CVE-2024-53749 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Plugin Devs Post Carousel Slider for Elementor post-carousel-slider-for-elementor allows Stored XSS.This issue affects Post Carousel Slider for Elementor: from n/a through <= 1.5.0. EPSS 0.2%Vulnerability Plugin Devs	CVE Database V5	2024-12-01

Showing 1–7 of 7 results