Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

7 records

Vendor: visualmodo Component: Borderless Clear all filters
TI-2024-10074 CVE-2024-10867 · GHSA-mwgx-87g3-23wm

Cross-site scripting in visualmodo Borderless – Addons and Templates for Elementor

Priority LOW 24

The Borderless – Widgets, Elements, Templates and Toolkit for Elementor & Gutenberg plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.6.2 due t…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00309 Published 2025-01-31 No fix listed CWE-79
TI-2024-10747 CVE-2024-11600 · GHSA-qf88-5j88-qjqv

Code injection in visualmodo Borderless – Addons and Templates for Elementor

Priority LOW 36

The Borderless – Widgets, Elements, Templates and Toolkit for Elementor & Gutenberg plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.6.0 via the 'write_config' function.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01336 Published 2025-01-30 No fix listed CWE-94
TI-2024-10732 CVE-2024-11583 · GHSA-f5c9-x837-f3vm

Missing authorization in visualmodo Borderless – Addons and Templates for Elementor

Priority LOW 20

The Borderless – Widgets, Elements, Templates and Toolkit for Elementor & Gutenberg plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'remove_zipped_font' function i…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00387 Published 2025-01-30 No fix listed CWE-862
TI-2024-36300 CVE-2024-54211 · GHSA-q96x-v8cx-4pmm

Cross-site scripting in visualmodo Borderless

Priority LOW 26

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Visualmodo Borderless borderless allows Cross-Site Scripting (XSS).This issue affects Borderless: from n/a through <=…

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00268 Published 2024-12-06 No fix listed CWE-79
TI-2024-23048 CVE-2024-34757 · GHSA-h47g-q8q7-fgrv

WordPress Borderless plugin <= 1.7.5 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Visualmodo Borderless borderless allows DOM-Based XSS.This issue affects Borderless: from n/a through <= 1.7.3.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00257 Published 2024-05-17 No fix listed CWE-79
TI-2024-04341 CVE-2024-4666 · GHSA-fmp7-q9w4-g4x8

Cross-site scripting in visualmodo Borderless – Addons and Templates for Elementor

Priority LOW 29

The Borderless – Widgets, Elements, Templates and Toolkit for Elementor & Gutenberg plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple widgets in all versions up to, and including, 1.5.3 due t…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.0041 Published 2024-05-14 No fix listed CWE-79