Read the docs

visualmodo

Records9All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

visualmodo records in CISA KEV

No visualmodo vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Borderless 7 records LOW

Records

7 records in Borderless · all components

TI-2024-10747 CVE-2024-11600 · GHSA-qf88-5j88-qjqv

Code injection in visualmodo Borderless – Addons and Templates for Elementor

Priority LOW 36

The Borderless – Widgets, Elements, Templates and Toolkit for Elementor & Gutenberg plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.6.0 via the 'write_config' function.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01336 Published 2025-01-30 No fix listed CWE-94
TI-2024-04341 CVE-2024-4666 · GHSA-fmp7-q9w4-g4x8

Cross-site scripting in visualmodo Borderless – Addons and Templates for Elementor

Priority LOW 29

The Borderless – Widgets, Elements, Templates and Toolkit for Elementor & Gutenberg plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple widgets in all versions up to, and including, 1.5.3 due t…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.0041 Published 2024-05-14 No fix listed CWE-79
TI-2024-23048 CVE-2024-34757 · GHSA-h47g-q8q7-fgrv

WordPress Borderless plugin <= 1.7.5 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Visualmodo Borderless borderless allows DOM-Based XSS.This issue affects Borderless: from n/a through <= 1.7.3.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00257 Published 2024-05-17 No fix listed CWE-79
TI-2024-36300 CVE-2024-54211 · GHSA-q96x-v8cx-4pmm

Cross-site scripting in visualmodo Borderless

Priority LOW 26

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Visualmodo Borderless borderless allows Cross-Site Scripting (XSS).This issue affects Borderless: from n/a through <=…

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00268 Published 2024-12-06 No fix listed CWE-79
TI-2024-10074 CVE-2024-10867 · GHSA-mwgx-87g3-23wm

Cross-site scripting in visualmodo Borderless – Addons and Templates for Elementor

Priority LOW 24

The Borderless – Widgets, Elements, Templates and Toolkit for Elementor & Gutenberg plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.6.2 due t…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00309 Published 2025-01-31 No fix listed CWE-79
TI-2024-10732 CVE-2024-11583 · GHSA-f5c9-x837-f3vm

Missing authorization in visualmodo Borderless – Addons and Templates for Elementor

Priority LOW 20

The Borderless – Widgets, Elements, Templates and Toolkit for Elementor & Gutenberg plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'remove_zipped_font' function i…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00387 Published 2025-01-30 No fix listed CWE-862
Open these records in search →