Read the docs

Plugin Devs

Records9All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Plugin Devs records in CISA KEV

No Plugin Devs vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

9 records

Priority LOW 35

Missing Authorization vulnerability in Plugin Devs Shopify to WooCommerce Migration migrate-shopify-to-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Shopify to Woo…

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00391 Published 2025-04-03 No fix listed CWE-862
Priority LOW 29

Missing Authorization vulnerability in Plugin Devs Post Carousel Slider for Elementor post-carousel-slider-for-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Post Car…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00462 Published 2025-09-22 No fix listed CWE-862
Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Plugin Devs Blog, Posts and Category Filter for Elementor blog-posts-and-category-for-elementor allows Stored XSS.This…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00256 Published 2025-03-27 No fix listed CWE-79
Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Plugin Devs Post Carousel Slider for Elementor post-carousel-slider-for-elementor allows Stored XSS.This issue affects…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00239 Published 2024-12-01 No fix listed CWE-79
Priority LOW 28

The Blog, Posts and Category Filter for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Post and Category Filter widget in all versions up to, and including, 1.0.3 due to insufficient…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00322 Published 2024-07-09 No fix listed CWE-79
Priority LOW 20

The Post Carousel Slider for Elementor plugin for WordPress is vulnerable to improper authorization due to a missing capability check on the process_wbelps_promo_form() function in all versions up to, and including, 1.6.…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00285 Published 2025-06-26 No fix listed CWE-862
Priority LOW 20

Missing Authorization vulnerability in Plugin Devs News Ticker for Elementor news-ticker-for-elementor allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects News Ticker for Elementor: from n/…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00441 Published 2024-12-13 No fix listed CWE-862
Priority LOW 16

Missing Authorization vulnerability in Plugin Devs Product Carousel Slider for Elementor ecommerce-product-carousel-slider-for-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue…

CVSS 3.1LOW 3.5 Network Low privileges User interaction EPSS 0.00247 Published 2025-09-05 No fix listed CWE-862
Open these records in search →