Vendors / elespare Records 3 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0 CVSS 9.0–10.0
CVSS high 0 CVSS 7.0–8.9
Exploited now elespare records in CISA KEV No elespare vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority LOW 29
The Elespare – Blog, Magazine and Newspaper Addons for Elementor with Templates, Widgets, Kits, and Header/Footer Builder.
CVSS 3.1 MEDIUM 6.4· Network · Low privileges · No interaction · EPSS 0.00411 · Published 2024-06-13 · No fix listed CWE-79
Priority LOW 27
Multiple plugins and/or themes for WordPress are vulnerable to Reflected Cross-Site Scripting via the url parameter in various versions due to insufficient input sanitization and output escaping.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00276 · Published 2026-05-01 · No fix listed CWE-79
Priority LOW 20
The Elespare – Build Your Blog, News & Magazine Websites with Expert-Designed Template Kits.
CVSS 3.1 MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00371 · Published 2024-04-23 · No fix listed CWE-862
Open these records in search → All records by CVSS severity
Critical0 High0 Medium3 Low0 No CVSS0