Read the docs

CrestaProject

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

CrestaProject records in CISA KEV

No CrestaProject vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Cresta Addons For Elementor 1 record LOW

Records

3 records

TI-2025-39119 CVE-2025-62971 · GHSA-r3xr-wm72-mg2w

WordPress Attesa Extra plugin <= 1.4.7 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CrestaProject Attesa Extra attesa-extra allows Stored XSS.This issue affects Attesa Extra: from n/a through <= 1.4.7.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00165 Published 2025-10-27 No fix listed CWE-79
TI-2024-34594 CVE-2024-51680 · GHSA-rh3g-3gh2-w68q

WordPress Cresta Addons for Elementor plugin <= 1.0.9 - Stored Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CrestaProject Cresta Addons for Elementor cresta-addons-for-elementor allows Stored XSS.This issue affects Cresta Addo…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00254 Published 2024-11-04 No fix listed CWE-79
TI-2024-09905 CVE-2024-10688 · GHSA-j3h6-4grg-mpxx

Attesa Extra <= 1.4.2 - Authenticated (Contributor+) Post Disclosure

Priority LOW 20

The Attesa Extra plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.4.2 via the 'attesa-template' shortcode due to insufficient restrictions on which posts can be included.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00302 Published 2024-11-09 No fix listed CWE-639
Open these records in search →