Priority MEDIUM 48
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in sonalsinha21 Recover abandoned cart for WooCommerce recover-wc-abandoned-cart allows SQL Injection.This issue affects…
CVSS 3.1CRITICAL 9.3· Network · No auth · No interaction · EPSS 0.01161 · Published 2025-06-09 · No fix listed CWE-89
Priority MEDIUM 42
The SKT Page Builder plugin for WordPress is vulnerable to arbitrary file uploads due to a missing capability check on the 'addLibraryByArchive' function in all versions up to, and including, 4.6.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00986 · Published 2025-01-09 · No fix listed CWE-862
Priority LOW 39
The SKT PayPal for WooCommerce plugin for WordPress is vulnerable to Payment Bypass in all versions up to, and including, 1.4.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00348 · Published 2025-11-27 · No fix listed CWE-602
Priority LOW 37
Cross-Site Request Forgery (CSRF) vulnerability in sonalsinha21 Recover abandoned cart for WooCommerce recover-wc-abandoned-cart allows Cross Site Request Forgery.This issue affects Recover abandoned cart for WooCommerce…
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00175 · Published 2025-04-22 · No fix listed CWE-352
Priority LOW 32
The SKT Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Age Gate and Creative Slider widgets in all versions up to, and including, 2.0 due to insufficient input san…
CVSS 3.1HIGH 7.4· Network · Low privileges · No interaction · EPSS 0.00298 · Published 2024-06-08 · No fix listed CWE-79
Priority LOW 31
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in sonalsinha21 SKT Donation skt-donation allows Reflected XSS.This issue affects SKT Donation: from n/a through <= 1.9.
CVSS 3.1HIGH 7.1· Network · No auth · User interaction · EPSS 0.0026 · Published 2025-01-31 · No fix listed CWE-79
Priority LOW 31
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in sonalsinha21 SKT Templates – Elementor & Gutenberg templates skt-templates allows Reflected XSS.This issue affects SKT…
CVSS 3.1HIGH 7.1· Network · No auth · User interaction · EPSS 0.00271 · Published 2024-09-17 · No fix listed CWE-79
Priority LOW 29
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in sonalsinha21 SKT Addons for Elementor skt-addons-for-elementor allows Stored XSS.This issue affects SKT Addons for Ele…
CVSS 3.1MEDIUM 6.5· Network · Low privileges · User interaction · EPSS 0.00368 · Published 2025-03-27 · No fix listed CWE-79
Priority LOW 29
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in sonalsinha21 SKT Blocks skt-blocks allows Stored XSS.This issue affects SKT Blocks: from n/a through <= 1.8.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · User interaction · EPSS 0.00276 · Published 2025-04-15 · No fix listed CWE-79
Priority LOW 29
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in sonalsinha21 SKT Skill Bar skt-skill-bar allows Stored XSS.This issue affects SKT Skill Bar: from n/a through <= 2.3.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · User interaction · EPSS 0.00274 · Published 2025-04-15 · No fix listed CWE-79
Priority LOW 29
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in sonalsinha21 Barter barter allows DOM-Based XSS.This issue affects Barter: from n/a through <= 1.6.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · User interaction · EPSS 0.00324 · Published 2024-12-13 · No fix listed CWE-79
Priority LOW 29
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in sonalsinha21 Bicycleshop bicycleshop allows DOM-Based XSS.This issue affects Bicycleshop: from n/a through <= 1.5.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · User interaction · EPSS 0.00306 · Published 2024-12-13 · No fix listed CWE-79
Priority LOW 29
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in sonalsinha21 Posterity allows Stored XSS.This issue affects Posterity: from n/a through 3.6.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · User interaction · EPSS 0.00288 · Published 2024-09-17 · No fix listed CWE-79
Priority LOW 29
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in SKT Themes SKT Addons for Elementor allows Stored XSS.This issue affects SKT Addons for Elementor: from n/a thr…
CVSS 3.1MEDIUM 6.5· Network · Low privileges · User interaction · EPSS 0.00317 · Published 2024-07-20 · No fix listed CWE-79
Priority LOW 29
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SKT Themes SKT Addons for Elementor allows Stored XSS.This issue affects SKT Addons for Elementor: from n/a through 1.…
CVSS 3.1MEDIUM 6.5· Network · Low privileges · User interaction · EPSS 0.00419 · Published 2024-05-09 · No fix listed CWE-79
Priority LOW 29
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SKT Themes SKT Addons for Elementor allows Stored XSS.This issue affects SKT Addons for Elementor: from n/a through 1.…
CVSS 3.1MEDIUM 6.5· Network · Low privileges · User interaction · EPSS 0.00419 · Published 2024-05-09 · No fix listed CWE-79
Priority LOW 28
The SKT Skill Bar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `chart_size` attribute of the `skillwrapper` shortcode in all versions up to, and including, 2.6.
CVSS 3.1MEDIUM 6.4· Network · Low privileges · No interaction · EPSS 0.00349 · Published 2026-08-05 · No fix listed CWE-79
Priority LOW 28
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in sonalsinha21 SKT Skill Bar skt-skill-bar allows DOM-Based XSS.This issue affects SKT Skill Bar: from n/a through <= 2.…
CVSS 3.1MEDIUM 6.5· Network · Low privileges · User interaction · EPSS 0.00165 · Published 2025-11-21 · No fix listed CWE-79
Priority LOW 28
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in sonalsinha21 SKT Blocks skt-blocks allows Stored XSS.This issue affects SKT Blocks: from n/a through <= 2.6.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · User interaction · EPSS 0.00215 · Published 2025-09-26 · No fix listed CWE-79
Priority LOW 28
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in sonalsinha21 SKT Blocks skt-blocks allows DOM-Based XSS.This issue affects SKT Blocks: from n/a through <= 2.2.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · User interaction · EPSS 0.00223 · Published 2025-05-19 · No fix listed CWE-79
Priority LOW 28
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in sonalsinha21 SKT Skill Bar skt-skill-bar allows Stored XSS.This issue affects SKT Skill Bar: from n/a through <= 2.4.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · User interaction · EPSS 0.00266 · Published 2025-05-07 · No fix listed CWE-79
Priority LOW 28
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in sonalsinha21 SKT Blocks skt-blocks allows Stored XSS.This issue affects SKT Blocks: from n/a through <= 2.0.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · User interaction · EPSS 0.00227 · Published 2025-04-22 · No fix listed CWE-79
Priority LOW 28
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in sonalsinha21 SKT Blocks skt-blocks allows Stored XSS.This issue affects SKT Blocks: from n/a through <= 1.7.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · User interaction · EPSS 0.00218 · Published 2025-02-17 · No fix listed CWE-79
Priority LOW 28
The SKT Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple widgets in all versions up to, and including, 3.7 due to insufficient input sanitization and output escaping on…
CVSS 3.1MEDIUM 6.4· Network · Low privileges · No interaction · EPSS 0.00246 · Published 2025-09-06 · No fix listed CWE-79
Priority LOW 28
The SKT Blocks – Gutenberg based Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Post Carousel block in all versions up to, and including, 1.9 due to insufficient input sanitization…
CVSS 3.1MEDIUM 6.4· Network · Low privileges · No interaction · EPSS 0.00233 · Published 2025-04-12 · No fix listed CWE-79
Load more