Priority MEDIUM 41
The Responsive Addons for Elementor – Free Elementor Addons Plugin and Elementor Templates plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.6.4 via several widgets.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00742 · Published 2025-02-21 · No fix listed CWE-98
Priority MEDIUM 41
The responsive-add-ons plugin before 2.2.7 for WordPress has incorrect access control for wp-admin/admin-ajax.php?action= requests.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01581 · Published 2020-04-23 · No fix listed
Priority MEDIUM 40
The Responsive theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the save_footer_text_callback function in all versions up to, and including, 5.0.2.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00652 · Published 2024-03-29 · No fix listed CWE-862
Priority LOW 30
The Responsive Blocks – Page Builder for Blocks & Patterns plugin for WordPress is vulnerable to Unauthenticated Open Email Relay in all versions up to, and including, 2.2.0.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00325 · Published 2026-04-21 · No fix listed CWE-20
Priority LOW 29
Missing Authorization vulnerability in CyberChimps Responsive Blocks responsive-block-editor-addons allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Responsive Blocks: from n/a t…
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00189 · Published 2026-03-13 · No fix listed CWE-862
Priority LOW 29
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CyberChimps Responsive Blocks responsive-block-editor-addons allows Stored XSS.This issue affects Responsive Blocks: f…
CVSS 3.1MEDIUM 6.5· Network · Low privileges · User interaction · EPSS 0.00324 · Published 2025-04-16 · No fix listed CWE-79
Priority LOW 29
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CyberChimps Responsive Addons for Elementor responsive-addons-for-elementor allows DOM-Based XSS.This issue affects Re…
CVSS 3.1MEDIUM 6.5· Network · Low privileges · User interaction · EPSS 0.0028 · Published 2024-11-11 · No fix listed CWE-79
Priority LOW 29
The Responsive Blocks – WordPress Gutenberg Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘section_tag’ parameter in all versions up to, and including, 1.9.9 due to insufficient input s…
CVSS 3.1MEDIUM 6.4· Network · Low privileges · No interaction · EPSS 0.00389 · Published 2025-01-30 · No fix listed CWE-79
Priority LOW 28
The Responsive Plus – Elementor Templates & Starter Sites plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Shortcode Attributes in all versions up to, and including, 3.5.3 due to insufficient input s…
CVSS 3.1MEDIUM 6.4· Network · Low privileges · No interaction · EPSS 0.00188 · Published 2026-10-03 · No fix listed CWE-79
Priority LOW 28
Missing Authorization vulnerability in CyberChimps Responsive Addons for Elementor responsive-addons-for-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Responsive Add…
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00238 · Published 2026-01-06 · No fix listed CWE-862
Priority LOW 28
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CyberChimps Responsive Addons for Elementor responsive-addons-for-elementor allows Stored XSS.This issue affects Respo…
CVSS 3.1MEDIUM 6.5· Network · Low privileges · User interaction · EPSS 0.00202 · Published 2025-07-16 · No fix listed CWE-79
Priority LOW 28
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CyberChimps Responsive Blocks responsive-block-editor-addons allows DOM-Based XSS.This issue affects Responsive Blocks…
CVSS 3.1MEDIUM 6.5· Network · Low privileges · User interaction · EPSS 0.00251 · Published 2025-06-27 · No fix listed CWE-79
Priority LOW 28
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CyberChimps Responsive Blocks responsive-block-editor-addons allows Stored XSS.This issue affects Responsive Blocks: f…
CVSS 3.1MEDIUM 6.5· Network · Low privileges · User interaction · EPSS 0.00192 · Published 2025-06-17 · No fix listed CWE-79
Priority LOW 28
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CyberChimps Responsive Blocks responsive-block-editor-addons allows Reflected XSS.This issue affects Responsive Blocks…
CVSS 3.1MEDIUM 6.5· Network · Low privileges · User interaction · EPSS 0.00243 · Published 2025-02-04 · No fix listed CWE-79
Priority LOW 28
The Responsive Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple widgets in all versions up to, and including, 2.0.1 due to insufficient input sanitization and output esc…
CVSS 3.1MEDIUM 6.4· Network · Low privileges · No interaction · EPSS 0.00237 · Published 2025-09-11 · No fix listed CWE-79
Priority LOW 28
The Responsive Addons for Elementor – Free Elementor Addons Plugin and Elementor Templates plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.6.8 the 'register_us…
CVSS 3.1MEDIUM 5.7· Network · Low privileges · User interaction · EPSS 0.00369 · Published 2025-03-26 · No fix listed CWE-200
Priority LOW 28
The Responsive Addons for Elementor – Free Elementor Addons Plugin and Elementor Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘rael_title_tag' parameter in all versions up to, and i…
CVSS 3.1MEDIUM 6.4· Network · Low privileges · No interaction · EPSS 0.00295 · Published 2025-04-15 · No fix listed CWE-79
Priority LOW 28
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in CyberChimps Responsive Blocks – WordPress Gutenberg Blocks allows Stored XSS.This issue affects Responsive Bloc…
CVSS 3.1MEDIUM 6.5· Network · Low privileges · User interaction · EPSS 0.00254 · Published 2024-08-18 · No fix listed CWE-79
Priority LOW 28
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in CyberChimps Responsive Mobile allows Stored XSS.This issue affects Responsive Mobile: from n/a through 1.15.1.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · User interaction · EPSS 0.0026 · Published 2024-07-20 · No fix listed CWE-79
Priority LOW 28
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in CyberChimps Responsive allows Stored XSS.This issue affects Responsive: from n/a through 5.0.3.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · User interaction · EPSS 0.00261 · Published 2024-06-04 · No fix listed CWE-79
Priority LOW 28
The Responsive Addons for Elementor – Free Elementor Addons Plugin and Elementor Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via HTML tags in several widgets in all versions up to, and inc…
CVSS 3.1MEDIUM 6.4· Network · Low privileges · No interaction · EPSS 0.0023 · Published 2025-01-24 · No fix listed CWE-79
Priority LOW 28
The Responsive Blocks – WordPress Gutenberg Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'responsive-block-editor-addons/portfolio' block in all versions up to, and including, 1.9.7 du…
CVSS 3.1MEDIUM 6.4· Network · Low privileges · No interaction · EPSS 0.00288 · Published 2024-12-24 · No fix listed CWE-79
Priority LOW 28
The Responsive Addons – Starter Templates, Advanced Features and Customizer Settings for Responsive Theme.
CVSS 3.1MEDIUM 6.4· Network · Low privileges · No interaction · EPSS 0.00315 · Published 2024-06-05 · No fix listed CWE-79
Priority LOW 25
Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in iFeature Slider plugin <= 1.2 on WordPress.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00435 · Published 2022-11-17 · No fix listed CWE-79
Priority LOW 24
Missing Authorization vulnerability in CyberChimps Responsive Plus responsive-add-ons allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Responsive Plus: from n/a through <= 3.2.0.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · No interaction · EPSS 0.00263 · Published 2025-06-06 · No fix listed CWE-862
Load more